diff --git a/src/internal.c b/src/internal.c
index 8ded80642..eb83f220e 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -27529,6 +27529,9 @@ static int DoSessionTicket(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
             #endif
 
             if (ssl->options.clientState == CLIENT_KEYEXCHANGE_COMPLETE) {
+            #ifdef WOLFSSL_DTLS
+                wc_HmacFree(&cookieHmac);
+            #endif
                 WOLFSSL_LEAVE("DoClientHello", ret);
                 WOLFSSL_END(WC_FUNC_CLIENT_HELLO_DO);