diff --git a/hack/dockerfile/binaries-commits b/hack/dockerfile/binaries-commits
index f1c8773b75..28f596b3b2 100644
--- a/hack/dockerfile/binaries-commits
+++ b/hack/dockerfile/binaries-commits
@@ -4,7 +4,7 @@ TOMLV_COMMIT=9baf8a8a9f2ed20a8e54160840c492f937eeaf9a
 
 # When updating RUNC_COMMIT, also update runc in vendor.conf accordingly
 RUNC_COMMIT=a01dafd48bc1c7cc12bdb01206f9fea7dd6feb70
-CONTAINERD_COMMIT=78fb8f45890a601e0fd9051cf9f9f74923e950fd
+CONTAINERD_COMMIT=665e84e6c28653a9c29a6db601636a92d46896f3
 TINI_COMMIT=949e6facb77383876aeff8a6944dde66b3089574
 LIBNETWORK_COMMIT=7b2b1feb1de4817d522cc372af149ff48d25028e
 VNDR_COMMIT=f56bd4504b4fad07a357913687fb652ee54bb3b0
diff --git a/vendor.conf b/vendor.conf
index 47fb2bfe01..a6d46c5f52 100644
--- a/vendor.conf
+++ b/vendor.conf
@@ -100,7 +100,7 @@ google.golang.org/genproto b3e7c2fb04031add52c4817f53f43757ccbf9c18
 github.com/docker/docker-credential-helpers f72c04f1d8e71959a6d103f808c50ccbad79b9fd
 
 # containerd
-github.com/docker/containerd 78fb8f45890a601e0fd9051cf9f9f74923e950fd
+github.com/docker/containerd 665e84e6c28653a9c29a6db601636a92d46896f3
 github.com/tonistiigi/fifo 1405643975692217d6720f8b54aeee1bf2cd5cf4
 
 # cluster