diff --git a/listener/anytls/server.go b/listener/anytls/server.go
index 667e8777..31a7c55a 100644
--- a/listener/anytls/server.go
+++ b/listener/anytls/server.go
@@ -135,6 +135,8 @@ func (l *Listener) HandleConn(conn net.Conn, h *sing.ListenerHandler) {
 	defer conn.Close()
 
 	b := buf.NewPacket()
+	defer b.Release()
+
 	_, err := b.ReadOnceFrom(conn)
 	if err != nil {
 		return
diff --git a/transport/anytls/client.go b/transport/anytls/client.go
index fd573ebe..19776df9 100644
--- a/transport/anytls/client.go
+++ b/transport/anytls/client.go
@@ -71,6 +71,8 @@ func (c *Client) CreateOutboundTLSConnection(ctx context.Context) (net.Conn, err
 	}
 
 	b := buf.NewPacket()
+	defer b.Release()
+
 	b.Write(c.passwordSha256)
 	var paddingLen int
 	if pad := c.padding.Load().GenerateRecordPayloadSizes(0); len(pad) > 0 {