diff --git a/net/mac802154/wpan.c b/net/mac802154/wpan.c
index 23bc91cf99c465232b0b2406f29a9bcd2b539b98..c8cfd54f37113db196432ac699c48277edc859d3 100644
--- a/net/mac802154/wpan.c
+++ b/net/mac802154/wpan.c
@@ -472,6 +472,7 @@ mac802154_subif_frame(struct mac802154_sub_if_data *sdata, struct sk_buff *skb,
 	rc = mac802154_llsec_decrypt(&sdata->sec, skb);
 	if (rc) {
 		pr_debug("decryption failed: %i\n", rc);
+		kfree_skb(skb);
 		return NET_RX_DROP;
 	}