diff --git a/.github/workflows/workflow-test.yml b/.github/workflows/workflow-test.yml
index 09558b6ec3d..aa7cc662e8d 100644
--- a/.github/workflows/workflow-test.yml
+++ b/.github/workflows/workflow-test.yml
@@ -151,15 +151,15 @@ jobs:
       windows-cni-version: v0.3.1
       docker-version: 5:28.0.4-1~ubuntu.24.04~noble
       # Windows CI still requires containerd v2.2.
-      # [v2.3.0-beta.2 regression] The virtual machine or container JSON document is invalid. (Hyper-V container)
+      # [v2.3.0 regression] The virtual machine or container JSON document is invalid. (Hyper-V container)
       # https://github.com/containerd/containerd/issues/13254
       windows-containerd-version: 2.2.3
       windows-containerd-sha: 81314dd5e3baad958acae0e4d1ff21eb27b7c8f8809232ab06c9f397cd221e02
-      linux-containerd-version: 2.3.0-beta.2
+      linux-containerd-version: 2.3.0
       # FIXME: containerd SHAs are not verified for authenticity (only affects tests)
       # https://github.com/containerd/nerdctl/issues/4666
       # Note: these are for amd64
-      linux-containerd-sha: feabdaf784298c5389972a93bf670b80abf7e674cd20a9d629fe133552046d0e
+      linux-containerd-sha: 4cb83e7100a5e73fcb626207d0b5bcfd1294e26aeddfe075dcfb38f375c5f887
       linux-containerd-service-sha: 1941362cbaa89dd591b99c32b050d82c583d3cd2e5fa63085d7017457ec5fca8
       linux-cni-version: v1.9.1
       linux-cni-sha: b98f74a0f8522f0a83867178729c1aa70f2158f90c45a2ca8fa791db1c76b303
diff --git a/Dockerfile b/Dockerfile
index 4cbddaeaf3b..26944eda8fb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,7 +17,7 @@
 
 # Basic deps
 # @BINARY: the binary checksums are verified via Dockerfile.d/SHA256SUMS.d/<COMPONENT>-<VERSION>
-ARG CONTAINERD_VERSION=v2.3.0-beta.2@8a5337317f3216cd920283334f69b2f9003f75b2
+ARG CONTAINERD_VERSION=v2.3.0@2976f38ccbfcda5ef1364d63d60b0a304e4bf94a
 ARG RUNC_VERSION=v1.4.2@c241c0bb5e60a8e8c1b2e53d4eca8d0068d8d57e
 ARG CNI_PLUGINS_VERSION=v1.9.1@BINARY