diff --git a/docker-bake.hcl b/docker-bake.hcl
index 698ccd3a..3c658b06 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -588,8 +588,8 @@ target "_pkg-containerd" {
   args = {
     PKG_NAME = PKG_NAME != null && PKG_NAME != "" ? PKG_NAME : "containerd"
     PKG_REPO = PKG_REPO != null && PKG_REPO != "" ? PKG_REPO : "https://github.com/containerd/containerd.git"
-    PKG_REF = PKG_REF != null && PKG_REF != "" ? PKG_REF : "release/2.2"
-    GO_VERSION = GO_VERSION != null && GO_VERSION != "" ? GO_VERSION : "1.25.11" # https://github.com/containerd/containerd/blob/release/2.2/.github/workflows/release/Dockerfile
+    PKG_REF = PKG_REF != null && PKG_REF != "" ? PKG_REF : "release/2.3"
+    GO_VERSION = GO_VERSION != null && GO_VERSION != "" ? GO_VERSION : "1.26.4" # https://github.com/containerd/containerd/blob/release/2.3/.github/workflows/release/Dockerfile
     GO_IMAGE_VARIANT = GO_IMAGE_VARIANT != null && GO_IMAGE_VARIANT != "" ? GO_IMAGE_VARIANT : "bookworm"
     PKG_DEB_EPOCH = PKG_DEB_EPOCH != null && PKG_DEB_EPOCH != "" ? PKG_DEB_EPOCH : ""
     RUNC_REF = RUNC_REF != null && RUNC_REF != "" ? RUNC_REF : null