diff --git a/src/security/security_manager.c b/src/security/security_manager.c
index e1b571ea52b1e1d42fcb79b810c29d51a0a743cd..21eb6f7452a75ac43c2f77076ca0ca82e5998ec8 100644
--- a/src/security/security_manager.c
+++ b/src/security/security_manager.c
@@ -117,9 +117,13 @@ virSecurityManagerNewStack(virSecurityManagerPtr primary)
     if (!mgr)
         return NULL;
 
-    virSecurityStackAddNested(mgr, primary);
+    if (virSecurityStackAddNested(mgr, primary) < 0)
+        goto error;
 
     return mgr;
+ error:
+    virObjectUnref(mgr);
+    return NULL;
 }