diff --git a/iptables.spec b/iptables.spec
index 707748f..3199e19 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -14,7 +14,7 @@ Name: iptables
 Summary: Tools for managing Linux kernel packet filtering capabilities
 URL: https://www.netfilter.org/projects/iptables
 Version: 1.8.11
-Release: 9%{?dist}
+Release: 10%{?dist}
 Source: %{url}/files/%{name}-%{version}.tar.xz
 Source1: iptables.init
 Source2: iptables-config
@@ -71,14 +71,7 @@ you should install this package.
 Summary: Legacy tools for managing Linux kernel packet filtering capabilities
 Requires: %{name}-legacy-libs%{?_isa} = %{version}-%{release}
 Requires: %{name}-libs%{?_isa} = %{version}-%{release}
-Requires: (kernel-modules-extra if kernel-core)
-Requires: (kernel-rt-modules-extra if kernel-rt-core)
-Requires: (kernel-64k-modules-extra if kernel-64k-core)
-Requires: (kernel-rt-64k-modules-extra if kernel-rt-64k-core)
-Requires: (kernel-debug-modules-extra if kernel-debug-core)
-Requires: (kernel-rt-debug-modules-extra if kernel-rt-debug-core)
-Requires: (kernel-64k-debug-modules-extra if kernel-64k-debug-core)
-Requires: (kernel-rt-64k-debug-modules-extra if kernel-rt-64k-debug-core)
+Requires: kernel-modules-extra-matched
 Conflicts: setup < 2.10.4-1
 Requires(post): %{_sbindir}/update-alternatives
 Requires(postun): %{_sbindir}/update-alternatives
@@ -203,14 +196,7 @@ a safer way to update iptables remotely.
 %package nft
 Summary: nftables compatibility for iptables, arptables and ebtables
 Requires: %{name}-libs%{?_isa} = %{version}-%{release}
-Requires: (kernel-modules-extra if kernel-core)
-Requires: (kernel-rt-modules-extra if kernel-rt-core)
-Requires: (kernel-64k-modules-extra if kernel-64k-core)
-Requires: (kernel-rt-64k-modules-extra if kernel-rt-64k-core)
-Requires: (kernel-debug-modules-extra if kernel-debug-core)
-Requires: (kernel-rt-debug-modules-extra if kernel-rt-debug-core)
-Requires: (kernel-64k-debug-modules-extra if kernel-64k-debug-core)
-Requires: (kernel-rt-64k-debug-modules-extra if kernel-rt-64k-debug-core)
+Requires: kernel-modules-extra-matched
 Requires(post): %{_sbindir}/update-alternatives
 Requires(post): %{_bindir}/readlink
 Requires(postun): %{_sbindir}/update-alternatives
@@ -534,6 +520,9 @@ fi
 %ghost %{_mandir}/man8/ebtables.8.gz
 
 %changelog
+* Wed Jun 04 2025 Phil Sutter <psutter@redhat.com> [1.8.11-10.el10]
+- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]
+
 * Wed Apr 23 2025 Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
 - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
 - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]