diff --git a/source3/smbd/pipes.c b/source3/smbd/pipes.c
index 2686cf4..878d171 100644
--- a/source3/smbd/pipes.c
+++ b/source3/smbd/pipes.c
@@ -326,6 +326,11 @@ static void pipe_write_andx_done(struct tevent_req *subreq)
 
  done:
 	chain_reply(req);
+	/*
+	 * We must free here as the ownership of req was
+	 * moved to the connection struct in reply_pipe_write_and_X().
+	 */
+	TALLOC_FREE(req);
 }
 
 /****************************************************************************
@@ -431,4 +436,9 @@ static void pipe_read_andx_done(struct tevent_req *subreq)
 
  done:
 	chain_reply(req);
+	/*
+	 * We must free here as the ownership of req was
+	 * moved to the connection struct in reply_pipe_read_and_X().
+	 */
+	TALLOC_FREE(req);
 }