diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 9b8cb29d9..2587a76ca 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -2195,6 +2195,11 @@ out:
     free(csec);
     free(cusec);
 
+    if (r->ek.encrypted_pa_data) {
+	free_METHOD_DATA(r->ek.encrypted_pa_data);
+	free(r->ek.encrypted_pa_data);
+    }
+
     free_TGS_REP(&r->rep);
     free_TransitedEncoding(&r->et.transited);
     free(r->et.starttime);