diff --git a/src/openvpn/socket.c b/src/openvpn/socket.c
index 2eb2e747..ea06bb18 100644
--- a/src/openvpn/socket.c
+++ b/src/openvpn/socket.c
@@ -1270,7 +1270,7 @@ socket_do_accept(socket_descriptor_t sd,
     {
         /* set socket file descriptor to not pass across execs, so that
          * scripts don't have access to it */
-        set_cloexec(sd);
+        set_cloexec(new_sd);
     }
     return new_sd;
 }