diff --git a/Dockerfile b/Dockerfile
index 3df7a0eb..e77ba277 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,7 +19,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on \
 ## Runtime
 ##
 
-FROM --platform=$TARGETPLATFORM alpine:3.22.1 as runtime
+FROM --platform=$TARGETPLATFORM alpine:3.22.2 as runtime
 RUN apk add iptables-legacy iptables libcap && \
     touch /run/xtables.lock && \
     chmod 0666 /run/xtables.lock
diff --git a/Dockerfile-cni-plugin b/Dockerfile-cni-plugin
index 27047eeb..b3449bc8 100644
--- a/Dockerfile-cni-plugin
+++ b/Dockerfile-cni-plugin
@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=target \
     AWS_LC_SYS_CFLAGS=$cflags just cni-repair-controller arch="$TARGETARCH" profile=release build && \
     mv "target/$target/release/linkerd-cni-repair-controller" .
 
-FROM --platform=$TARGETPLATFORM alpine:3.22.1 as runtime
+FROM --platform=$TARGETPLATFORM alpine:3.22.2 as runtime
 WORKDIR /linkerd
 RUN apk add \
     # For inotifywait