diff --git a/lib/puma/reactor.rb b/lib/puma/reactor.rb
index 50b655038e..384f923845 100644
--- a/lib/puma/reactor.rb
+++ b/lib/puma/reactor.rb
@@ -237,7 +237,8 @@ def run_internal
                 ssl_socket = c.io
                 begin
                   addr = ssl_socket.peeraddr.last
-                rescue IOError
+                # EINVAL can happen when browser closes socket w/security exception
+                rescue IOError, Errno::EINVAL
                   addr = "<unknown>"
                 end