diff --git a/CHANGES b/CHANGES
index c213a2ef79..308ebac320 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5527.	[bug]		There was a NULL pointer dereference if the creation
+			of the fetch to determine if a negative trust anchor
+			was still valid failed. [GL #2244]
+
 5523.	[bug]		The initial lookup of a zone transitioning to/from
 			the signed state could fail if the DNSKEY RRset was
 			not found.  Subsequent lookups would succeed.
diff --git a/lib/dns/nta.c b/lib/dns/nta.c
index 79058bb9b5..73febe44ed 100644
--- a/lib/dns/nta.c
+++ b/lib/dns/nta.c
@@ -283,8 +283,8 @@ checkbogus(isc_task_t *task, isc_event_t *event) {
 					  &nta->sigrdataset,
 					  &nta->fetch);
 	if (result != ISC_R_SUCCESS) {
-		dns_view_weakdetach(&view);
 		nta_detach(view->mctx, &nta);
+		dns_view_weakdetach(&view);
 	}
 }