diff --git a/src/conf/nwfilter_conf.c b/src/conf/nwfilter_conf.c
index 07edf19fd3..724d33e230 100644
--- a/src/conf/nwfilter_conf.c
+++ b/src/conf/nwfilter_conf.c
@@ -375,6 +375,7 @@ virNWFilterRuleDefAddVar(virNWFilterRuleDefPtr nwf,
 
     if (VIR_EXPAND_N(nwf->varAccess, nwf->nVarAccess, 1) < 0) {
         virReportOOMError();
+        virNWFilterVarAccessFree(varAccess);
         return -1;
     }