diff --git a/include/haproxy/xprt_quic-t.h b/include/haproxy/xprt_quic-t.h
index 6e83594de..9e282f5d5 100644
--- a/include/haproxy/xprt_quic-t.h
+++ b/include/haproxy/xprt_quic-t.h
@@ -657,6 +657,7 @@ struct quic_conn {
 	struct quic_path paths[1];
 	struct quic_path *path;
 
+	struct listener *li; /* only valid for frontend connections */
 	/* MUX */
 	struct qcc *qcc;
 	struct task *timer_task;
diff --git a/src/xprt_quic.c b/src/xprt_quic.c
index cee93229e..3fd463284 100644
--- a/src/xprt_quic.c
+++ b/src/xprt_quic.c
@@ -2903,6 +2903,13 @@ static void quic_conn_free(struct quic_conn *conn)
 		return;
 
 	free_quic_conn_cids(conn);
+
+	/* remove the connection from receiver cids trees */
+	HA_RWLOCK_WRLOCK(OTHER_LOCK, &conn->li->rx.cids_lock);
+	ebmb_delete(&conn->odcid_node);
+	ebmb_delete(&conn->scid_node);
+	HA_RWLOCK_WRUNLOCK(OTHER_LOCK, &conn->li->rx.cids_lock);
+
 	for (i = 0; i < QUIC_TLS_ENC_LEVEL_MAX; i++)
 		quic_conn_enc_level_uninit(&conn->els[i]);
 	if (conn->timer_task)
@@ -3004,6 +3011,7 @@ static struct quic_conn *qc_new_conn(unsigned int version, int ipv4,
 			memcpy(qc->dcid.data, scid, scid_len);
 		qc->dcid.len = scid_len;
 		qc->tx.qring_list = &l->rx.tx_qrings;
+		qc->li = l;
 	}
 	/* QUIC Client (outgoing connection to servers) */
 	else {