diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
index 53b4b3f76697..056388c04599 100644
--- a/net/wireless/nl80211.c
+++ b/net/wireless/nl80211.c
@@ -6803,8 +6803,10 @@ static int nl80211_parse_beacon(struct cfg80211_registered_device *rdev,
 			if (IS_ERR(rnr))
 				return PTR_ERR(rnr);
 
-			if (rnr && rnr->cnt < bcn->mbssid_ies->cnt)
+			if (rnr && rnr->cnt < bcn->mbssid_ies->cnt) {
+				kfree(rnr);
 				return -EINVAL;
+			}
 
 			bcn->rnr_ies = rnr;
 		}