diff --git a/src/cmd/ksh93/sh/subshell.c b/src/cmd/ksh93/sh/subshell.c
index d90a7f117..9c014ead5 100644
--- a/src/cmd/ksh93/sh/subshell.c
+++ b/src/cmd/ksh93/sh/subshell.c
@@ -392,9 +392,9 @@ static void nv_restore(struct subshell *sp)
 		}
 		mp->nvflag = np->nvflag|(flags&NV_MINIMAL);
 		if(nv_cover(mp))
-			nv_putval(mp, nv_getval(np),np->nvflag|NV_NOFREE|NV_RDONLY);
+			nv_putval(mp,nv_getval(np),NV_RDONLY);
 		else
-			mp->nvalue.cp = np->nvalue.cp;
+			mp->nvalue = np->nvalue;
 		if(nofree && np->nvfun && !np->nvfun->nofree)
 			free((char*)np->nvfun);
 		np->nvfun = 0;
diff --git a/src/cmd/ksh93/tests/leaks.sh b/src/cmd/ksh93/tests/leaks.sh
index b66f275e7..85a1481f7 100755
--- a/src/cmd/ksh93/tests/leaks.sh
+++ b/src/cmd/ksh93/tests/leaks.sh
@@ -439,5 +439,17 @@ after=$(getmem)
 err_exit_if_leak 'PWD and/or OLDPWD changed by cd'
 cd $original_pwd
 
+# ======
+# https://github.com/ksh93/ksh/issues/253#issuecomment-815308466
+: <<'disabled'	# TODO: known leak(s) (approx 1008 KiB after 16384 iterations)
+before=$(getmem)
+for ((i=0; i < N; i++))
+do
+	(SECONDS=1; LANG=C)
+done
+after=$(getmem)
+err_exit_if_leak 'Variable with discipline function in subshell causes memory leak'
+disabled
+
 # ======
 exit $((Errors<125?Errors:125))
diff --git a/src/cmd/ksh93/tests/locale.sh b/src/cmd/ksh93/tests/locale.sh
index 645c718bf..c1043efe5 100755
--- a/src/cmd/ksh93/tests/locale.sh
+++ b/src/cmd/ksh93/tests/locale.sh
@@ -349,7 +349,7 @@ x=$(LC_ALL=debug $SHELL -c 'typeset -R10 x="a<2b|>c";print -r -- "${x}"')
 x=$(LC_ALL=debug $SHELL -c 'typeset -L10 x="a<2b|>c";print -r -- "${x}"')
 [[ $x == 'a<2b|>c   ' ]] || err_exit 'typeset -L10 should end in three spaces'
 
-if	false &&  # Disable this test because it really test the OS-provided en_US.UTF-8 locale data, which may be broken.
+if	false &&  # Disable this test because it really tests the OS-provided en_US.UTF-8 locale data, which may be broken.
 	$SHELL -c "export LC_ALL=en_US.UTF-8; c=$'\342\202\254'; [[ \${#c} == 1 ]]" 2>/dev/null
 then	LC_ALL=en_US.UTF-8
 	unset i p1 p2 x
@@ -378,5 +378,18 @@ then	LC_ALL=en_US.UTF-8
 	
 fi
 
+# ======
+# The locale should be restored along with locale variables when leaving a virtual subshell.
+# https://github.com/ksh93/ksh/issues/253#issuecomment-815290154
+if	((SHOPT_MULTIBYTE))
+then
+	unset "${!LC_@}"
+	LANG=C.UTF-8
+	exp=$'5\n10\n5'
+	got=$(eval 'var=äëïöü'; echo ${#var}; (LANG=C; echo ${#var}); echo ${#var})
+	[[ $got == "$exp" ]] || err_exit "locale is not restored properly upon leaving virtual subshell" \
+		"(expected $(printf %q "$exp"); got $(printf %q "$got"))"
+fi
+
 # ======
 exit $((Errors<125?Errors:125))
diff --git a/src/cmd/ksh93/tests/variables.sh b/src/cmd/ksh93/tests/variables.sh
index 3eb164d33..48427e9b4 100755
--- a/src/cmd/ksh93/tests/variables.sh
+++ b/src/cmd/ksh93/tests/variables.sh
@@ -1261,5 +1261,15 @@ got="$($SHELL -c 'PS4="${.sh.subshell}"; echo ${.sh.subshell}')"
 [[ "$exp" == "$got" ]] || err_exit "\${.sh.subshell} is wrongly unset in the \$PS4 prompt" \
 	"(expected $(printf %q "$exp"), got $(printf %q "$got"))"
 
+# ======
+# Corruption of SECONDS on leaving virtual subshell
+# https://github.com/ksh93/ksh/issues/253#issuecomment-815191052
+osec=$SECONDS
+(SECONDS=20)
+nsec=$SECONDS
+if	((nsec<osec || nsec>osec+0.1))
+then	err_exit "SECONDS corrupted after leaving virtual subshell (expected $osec, got $nsec)"
+fi
+
 # ======
 exit $((Errors<125?Errors:125))