diff --git a/net/mac80211/sta_info.c b/net/mac80211/sta_info.c
index c34a5f97abc74ff8791b20676130dd1ce5d55c0c..be9120fb844810487c3e07cc84f4e42a0b1387a7 100644
--- a/net/mac80211/sta_info.c
+++ b/net/mac80211/sta_info.c
@@ -240,6 +240,7 @@ void sta_info_free(struct ieee80211_local *local, struct sta_info *sta)
 
 	sta_dbg(sta->sdata, "Destroyed STA %pM\n", sta->sta.addr);
 
+	kfree(rcu_dereference_raw(sta->sta.rates));
 	kfree(sta);
 }