diff --git a/lib/krb5/mk_req_ext.c b/lib/krb5/mk_req_ext.c
index 1ade5694f..3593153ac 100644
--- a/lib/krb5/mk_req_ext.c
+++ b/lib/krb5/mk_req_ext.c
@@ -88,6 +88,8 @@ krb5_mk_req_extended(krb5_context context,
 				c_opt,
 				NULL,
 				&authenticator);
+  if (c_opt)
+      free_Checksum (c_opt);
   if (r)
     return r;