diff --git a/src/libcharon/sa/ikev2/tasks/ike_init.c b/src/libcharon/sa/ikev2/tasks/ike_init.c
index 98185f576..cae68559f 100644
--- a/src/libcharon/sa/ikev2/tasks/ike_init.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_init.c
@@ -1008,6 +1008,12 @@ METHOD(task_t, process_i, status_t,
 					break;
 				case COOKIE:
 				{
+					if (this->old_sa)
+					{
+						DBG1(DBG_IKE, "received COOKIE notify during rekeying"
+						     ", ignored");
+						break;
+					}
 					chunk_free(&this->cookie);
 					this->cookie = chunk_clone(notify->get_notification_data(notify));
 					this->ike_sa->reset(this->ike_sa, FALSE);