diff --git a/include/osmocom/ctrl/control_cmd.h b/include/osmocom/ctrl/control_cmd.h
index 865b006..a5df753 100644
--- a/include/osmocom/ctrl/control_cmd.h
+++ b/include/osmocom/ctrl/control_cmd.h
@@ -56,6 +56,8 @@
 	struct llist_head def_cmds;
 };
 
+struct ctrl_cmd_def;
+
 struct ctrl_cmd {
 	struct ctrl_connection *ccon;
 	enum ctrl_type type;
@@ -64,6 +66,7 @@
 	char *variable;
 	char *value;
 	char *reply;
+	struct ctrl_cmd_def *defer;
 };
 
 #define ctrl_cmd_reply_printf(cmd, fmt, args ...) \
diff --git a/src/ctrl/control_cmd.c b/src/ctrl/control_cmd.c
index c747e84..fb0cd2b 100644
--- a/src/ctrl/control_cmd.c
+++ b/src/ctrl/control_cmd.c
@@ -566,6 +566,7 @@
 
 	cd = talloc_zero(ctx, struct ctrl_cmd_def);
 
+	cmd->defer = cd;
 	cd->cmd = cmd;
 	cd->data = data;
 
diff --git a/src/ctrl/control_if.c b/src/ctrl/control_if.c
index 07de0d4..df8abbc 100644
--- a/src/ctrl/control_if.c
+++ b/src/ctrl/control_if.c
@@ -401,6 +401,13 @@
 	if (cmd->type != CTRL_TYPE_ERROR) {
 		cmd->ccon = ccon;
 		if (ctrl_cmd_handle(ctrl, cmd, ctrl->data) == CTRL_CMD_HANDLED) {
+
+			if (cmd->defer) {
+				/* The command is still stored as ctrl_cmd_def.cmd, in the def_cmds list.
+				 * Just leave hanging for deferred handling. Reply will happen later. */
+				return 0;
+			}
+
 			/* On CTRL_CMD_HANDLED, no reply needs to be sent back. */
 			talloc_free(cmd);
 			cmd = NULL;
diff --git a/tests/ctrl/ctrl_test.c b/tests/ctrl/ctrl_test.c
index f20f534..b7b30c3 100644
--- a/tests/ctrl/ctrl_test.c
+++ b/tests/ctrl/ctrl_test.c
@@ -401,8 +401,6 @@
 	/* Expecting a ctrl_cmd_def as well as the cmd to still be allocated */
 	if (talloc_total_size(ctx) <= ctx_size_before_defer) {
 		printf("deferred command apparently deallocated too soon\n");
-		/* ERROR -- showing current bug in handling deallocated cmds, hence exiting early */
-		goto exit_early;
 		talloc_report_full(ctx, stdout);
 		OSMO_ASSERT(false);
 	}
@@ -417,8 +415,6 @@
 		OSMO_ASSERT(false);
 	}
 
-exit_early:
-
 	talloc_free(ccon);
 	talloc_free(ctrl);
 
diff --git a/tests/ctrl/ctrl_test.ok b/tests/ctrl/ctrl_test.ok
index 6a902be..07f4aac 100644
--- a/tests/ctrl/ctrl_test.ok
+++ b/tests/ctrl/ctrl_test.ok
@@ -176,5 +176,6 @@
 test_deferred_cmd
 get_test_defer called
 ctrl_handle_msg() returned 0
-deferred command apparently deallocated too soon
+invoking ctrl_test_defer_cb() asynchronously
+ctrl_test_defer_cb called
 success