diff --git a/ext/dom/tests/xpath_php_function_foreign_doc_namespace_axis.phpt b/ext/dom/tests/xpath_php_function_foreign_doc_namespace_axis.phpt
new file mode 100644
index 000000000000..ad77a052d454
--- /dev/null
+++ b/ext/dom/tests/xpath_php_function_foreign_doc_namespace_axis.phpt
@@ -0,0 +1,36 @@
+--TEST--
+DOMXPath: namespace axis result on a node from a document created inside an XPath callback
+--EXTENSIONS--
+dom
+--FILE--
+<?php
+
+$doc = new DOMDocument;
+$doc->loadXML('<root/>');
+
+$xp = new DOMXPath($doc);
+$xp->registerNamespace('my', 'my.ns');
+$xp->registerPHPFunctionNS('my.ns', 'include', function () {
+    $d = new DOMDocument;
+    $d->loadXML('<r><uaf xmlns:a="urn:a"/></r>');
+    return $d->documentElement;
+});
+
+$result = $xp->query('my:include()/uaf/namespace::*');
+var_dump($result->length);
+unset($xp);
+
+foreach ($result as $ns) {
+    var_dump($ns->nodeName, $ns->parentNode->nodeName);
+}
+
+echo "Done\n";
+
+?>
+--EXPECT--
+int(2)
+string(9) "xmlns:xml"
+string(3) "uaf"
+string(7) "xmlns:a"
+string(3) "uaf"
+Done
diff --git a/ext/dom/xpath.c b/ext/dom/xpath.c
index a9832f4c3e22..af5d7eacc2ed 100644
--- a/ext/dom/xpath.c
+++ b/ext/dom/xpath.c
@@ -411,7 +411,7 @@ static void php_xpath_eval(INTERNAL_FUNCTION_PARAMETERS, int type, bool modern)
 
 						/* Make sure parent dom object exists, so we can take an extra reference. */
 						zval parent_zval; /* don't destroy me, my lifetime is transfered to the fake namespace decl */
-						php_dom_create_object(nsparent, &parent_zval, &intern->dom);
+						php_dom_create_object(nsparent, &parent_zval, dom_xpath_intern_for_doc(intern, nsparent->doc));
 						dom_object *parent_intern = Z_DOMOBJ_P(&parent_zval);
 
 						node = php_dom_create_fake_namespace_decl(nsparent, original, &child, parent_intern);