diff --git a/kuryr_kubernetes/controller/handlers/kuryrnetworkpolicy.py b/kuryr_kubernetes/controller/handlers/kuryrnetworkpolicy.py
index f98f71a95..e00efea7b 100644
--- a/kuryr_kubernetes/controller/handlers/kuryrnetworkpolicy.py
+++ b/kuryr_kubernetes/controller/handlers/kuryrnetworkpolicy.py
@@ -197,7 +197,8 @@ class KuryrNetworkPolicyHandler(k8s_base.ResourceEventHandler):
         pods_to_update.extend(matched_pods)
 
         for pod in pods_to_update:
-            if driver_utils.is_host_network(pod):
+            if (driver_utils.is_host_network(pod) or
+                    not driver_utils.is_pod_scheduled(pod)):
                 continue
             pod_sgs = self._drv_pod_sg.get_security_groups(pod, project_id)
             try: