diff --git a/src/cm_ctl/ctl_misc.cpp b/src/cm_ctl/ctl_misc.cpp
index 9a294915c8ad03aea34412315032344535393337..8c479348457d53e762c2c737b528bd3b5d2b7cb0 100644
--- a/src/cm_ctl/ctl_misc.cpp
+++ b/src/cm_ctl/ctl_misc.cpp
@@ -1656,6 +1656,7 @@ char *DoConcatCmd(const CtlOption *ctx)
     int rc = memset_s(cmd, CM_PATH_LENGTH, 0, CM_PATH_LENGTH);
     securec_check_errno(rc, (void)rc);
     if (DoCheckRole(&ctx->dcfOption) == -1) {
+        free(cmd);
         return NULL;
     }
 
diff --git a/src/cm_ctl/ctl_param_check.cpp b/src/cm_ctl/ctl_param_check.cpp
index 30d63d00778cbadff2fb3f526f95f97c131c906e..022dfc6658064c42fa076566955fd242d7985273 100644
--- a/src/cm_ctl/ctl_param_check.cpp
+++ b/src/cm_ctl/ctl_param_check.cpp
@@ -304,6 +304,7 @@ char *GetParamLineInfo(const char *paramName, const char * const *paramInfos, in
 
     if (paramInfos == NULL) {
         write_runlog(ERROR, "Fail to get param info.\n");
+        free(info);
         return NULL;
     }