diff --git a/wpa_supplicant/rrm.c b/wpa_supplicant/rrm.c
index 36a8336e7..5be917c8a 100644
--- a/wpa_supplicant/rrm.c
+++ b/wpa_supplicant/rrm.c
@@ -1032,6 +1032,7 @@ wpas_rm_handle_beacon_req(struct wpa_supplicant *wpa_s,
 	elems_len = len - sizeof(*req);
 	rand_interval = le_to_host16(req->rand_interval);
 
+	os_free(params->freqs);
 	os_memset(params, 0, sizeof(*params));
 
 	data->token = elem_token;