diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c
index 2c3f11106e00..aefc0ca99ece 100644
--- a/sys/netipsec/key.c
+++ b/sys/netipsec/key.c
@@ -2283,6 +2283,7 @@ key_spdget(so, m, mhp)
 	}
 
 	n = key_setdumpsp(sp, SADB_X_SPDGET, 0, mhp->msg->sadb_msg_pid);
+	KEY_FREESP(&sp);
 	if (n != NULL) {
 		m_freem(m);
 		return key_sendup_mbuf(so, n, KEY_SENDUP_ONE);