diff --git a/package/wireguard/Config.in b/package/wireguard/Config.in
index 0321755db3..fe92fd6cfc 100644
--- a/package/wireguard/Config.in
+++ b/package/wireguard/Config.in
@@ -1,5 +1,7 @@
 config BR2_PACKAGE_WIREGUARD
 	bool "wireguard"
+	# kernel module requires 3.10+, userspace makes no sense without it
+	depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_10
 	select BR2_PACKAGE_LIBMNL
 	help
 	  WireGuard is an extremely simple yet fast and modern VPN
@@ -16,3 +18,6 @@ config BR2_PACKAGE_WIREGUARD
 	  VPN solution in the industry.
 
 	  https://www.wireguard.com
+
+comment "wireguard needs a toolchain w/ headers >= 3.10"
+	depends on !BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_10