diff --git a/CHANGELOG.md b/CHANGELOG.md
index aa3afd289e8..5b144fb2d53 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,11 +26,11 @@ and this project adheres to
 
 ### Changed
 
-- Post-updating relaunch possibility is now determined OS-dependently ([#2231]).
+- Post-updating relaunch possibility is now determined OS-dependently ([#2231], [#2391]).
 - Made the mobileconfig HTTP API more robust and predictable, add parameters and
   improve error response ([#2358]).
-- Improved HTTP requests handling and timeouts. ([#2343]).
-- Our snap package now uses the `core20` image as its base [#2306].
+- Improved HTTP requests handling and timeouts ([#2343]).
+- Our snap package now uses the `core20` image as its base ([#2306]).
 - Various internal improvements ([#2271], [#2297]).
 
 [#2231]: https://github.com/AdguardTeam/AdGuardHome/issues/2231
@@ -39,6 +39,7 @@ and this project adheres to
 [#2306]: https://github.com/AdguardTeam/AdGuardHome/issues/2306
 [#2343]: https://github.com/AdguardTeam/AdGuardHome/issues/2343
 [#2358]: https://github.com/AdguardTeam/AdGuardHome/issues/2358
+[#2391]: https://github.com/AdguardTeam/AdGuardHome/issues/2391
 
 ### Fixed
 
diff --git a/internal/sysutil/os_linux.go b/internal/sysutil/os_linux.go
index cfe8cf85e46..7f20e11edee 100644
--- a/internal/sysutil/os_linux.go
+++ b/internal/sysutil/os_linux.go
@@ -12,7 +12,10 @@ import (
 
 func canBindPrivilegedPorts() (can bool, err error) {
 	cnbs, err := unix.PrctlRetInt(unix.PR_CAP_AMBIENT, unix.PR_CAP_AMBIENT_IS_SET, unix.CAP_NET_BIND_SERVICE, 0, 0)
-	return cnbs == 1, err
+	// Don't check the error because it's always nil on Linux.
+	adm, _ := haveAdminRights()
+
+	return cnbs == 1 || adm, err
 }
 
 func setRlimit(val uint) {
@@ -26,6 +29,8 @@ func setRlimit(val uint) {
 }
 
 func haveAdminRights() (bool, error) {
+	// The error is nil because the platform-independent function signature
+	// requires returning an error.
 	return os.Getuid() == 0, nil
 }