diff --git a/doc/changelog.txt b/doc/changelog.txt
index a170667..f360f83 100644
--- a/doc/changelog.txt
+++ b/doc/changelog.txt
@@ -4,6 +4,7 @@ HEAD
 - TEE: do rechecksumming in PREROUTING too
 - TEE: decrease TTL on cloned packet
 - TEE: set dont-fragment on cloned packets
+- TEE: free skb when route lookup failed
 
 
 Xtables-addons 1.24 (March 17 2010)
diff --git a/extensions/xt_TEE.c b/extensions/xt_TEE.c
index 00cc3ad..de624c1 100644
--- a/extensions/xt_TEE.c
+++ b/extensions/xt_TEE.c
@@ -76,6 +76,7 @@ tee_tg_route4(struct sk_buff *skb, const struct xt_tee_tginfo *info)
 		if (net_ratelimit())
 			pr_debug(KBUILD_MODNAME
 			         ": could not route packet (%d)", err);
+		kfree_skb(skb);
 		return false;
 	}
 
@@ -249,6 +250,7 @@ tee_tg_route6(struct sk_buff *skb, const struct xt_tee_tginfo *info)
 	if (dst == NULL) {
 		if (net_ratelimit())
 			printk(KERN_ERR "ip6_route_output failed for tee\n");
+		kfree_skb(skb);
 		return false;
 	}