diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c
index d802bc8f47a..eda41d36ab8 100644
--- a/sys/netinet/tcp_input.c
+++ b/sys/netinet/tcp_input.c
@@ -2600,10 +2600,12 @@ tcp_do_segment(struct mbuf *m, struct tcphdr *th, struct socket *so,
 						} else {
 							if (V_tcp_do_prr_conservative)
 								limit = tp->sackhint.prr_delivered -
-									tp->sackhint.sack_bytes_rexmit;
+									(tp->sackhint.sack_bytes_rexmit +
+									(tp->snd_nxt - tp->snd_recover));
 							else
 								limit = imax(tp->sackhint.prr_delivered -
-									    tp->sackhint.sack_bytes_rexmit,
+									    (tp->sackhint.sack_bytes_rexmit +
+									    (tp->snd_nxt - tp->snd_recover)),
 									    del_data) + maxseg;
 							snd_cnt = imin(tp->snd_ssthresh - pipe, limit);
 						}
@@ -3976,10 +3978,12 @@ tcp_prr_partialack(struct tcpcb *tp, struct tcphdr *th)
 	} else {
 		if (V_tcp_do_prr_conservative)
 			limit = tp->sackhint.prr_delivered -
-			    tp->sackhint.sack_bytes_rexmit;
+			    (tp->sackhint.sack_bytes_rexmit +
+			    (tp->snd_nxt - tp->snd_recover));
 		else
 			limit = imax(tp->sackhint.prr_delivered -
-				    tp->sackhint.sack_bytes_rexmit,
+				    (tp->sackhint.sack_bytes_rexmit +
+				    (tp->snd_nxt - tp->snd_recover)),
 				    del_data) + maxseg;
 		snd_cnt = imin((tp->snd_ssthresh - pipe), limit);
 	}