diff --git a/openbsc/src/gprs/gb_proxy_main.c b/openbsc/src/gprs/gb_proxy_main.c
index c66350c..0bfc6cf 100644
--- a/openbsc/src/gprs/gb_proxy_main.c
+++ b/openbsc/src/gprs/gb_proxy_main.c
@@ -84,7 +84,7 @@
 	default:
 		LOGP(DGPRS, LOGL_ERROR, "SGSN: Unknown event %u from NS\n", event);
 		if (msg)
-			talloc_free(msg);
+			msgb_free(msg);
 		rc = -EIO;
 		break;
 	}
diff --git a/openbsc/src/gprs/gprs_sndcp.c b/openbsc/src/gprs/gprs_sndcp.c
index 3e260ab..e422426 100644
--- a/openbsc/src/gprs/gprs_sndcp.c
+++ b/openbsc/src/gprs/gprs_sndcp.c
@@ -162,7 +162,7 @@
 		dqe = defrag_get_seg(sne, seg_nr);
 		if (!dqe) {
 			LOGP(DSNDCP, LOGL_ERROR, "Segment %u missing\n", seg_nr);
-			talloc_free(msg);
+			msgb_free(msg);
 			return -EIO;
 		}
 		/* actually append the segment to the N-PDU */
diff --git a/openbsc/src/gprs/sgsn_main.c b/openbsc/src/gprs/sgsn_main.c
index 95922fc..f7eb221 100644
--- a/openbsc/src/gprs/sgsn_main.c
+++ b/openbsc/src/gprs/sgsn_main.c
@@ -91,7 +91,7 @@
 	default:
 		LOGP(DGPRS, LOGL_ERROR, "SGSN: Unknown event %u from NS\n", event);
 		if (msg)
-			talloc_free(msg);
+			msgb_free(msg);
 		rc = -EIO;
 		break;
 	}
diff --git a/openbsc/src/libgb/gprs_ns.c b/openbsc/src/libgb/gprs_ns.c
index a8f97e2..39ccd28 100644
--- a/openbsc/src/libgb/gprs_ns.c
+++ b/openbsc/src/libgb/gprs_ns.c
@@ -998,7 +998,7 @@
 	rc = sendto(nsi->nsip.fd.fd, msg->data, msg->len, 0,
 		  (struct sockaddr *)daddr, sizeof(*daddr));
 
-	talloc_free(msg);
+	msgb_free(msg);
 
 	return rc;
 }
diff --git a/openbsc/src/libgb/gprs_ns_frgre.c b/openbsc/src/libgb/gprs_ns_frgre.c
index 3662572..27c5c57 100644
--- a/openbsc/src/libgb/gprs_ns_frgre.c
+++ b/openbsc/src/libgb/gprs_ns_frgre.c
@@ -263,7 +263,7 @@
 	rc = sendto(nsi->frgre.fd.fd, msg->data, msg->len, 0,
 		  (struct sockaddr *)&daddr, sizeof(daddr));
 
-	talloc_free(msg);
+	msgb_free(msg);
 
 	return rc;
 }
diff --git a/openbsc/src/libmsc/mncc_builtin.c b/openbsc/src/libmsc/mncc_builtin.c
index 31d9b43..761fedb 100644
--- a/openbsc/src/libmsc/mncc_builtin.c
+++ b/openbsc/src/libmsc/mncc_builtin.c
@@ -418,7 +418,7 @@
 	}
 
 out_free:
-	talloc_free(msg);
+	msgb_free(msg);
 
 	return rc;
 }