diff --git a/libcontainer/process_linux.go b/libcontainer/process_linux.go
index fddb03408..d9c441ec5 100644
--- a/libcontainer/process_linux.go
+++ b/libcontainer/process_linux.go
@@ -70,7 +70,7 @@ type processComm struct {
 	logPipeChild  *os.File
 }
 
-func newProcessComm() (*processComm, error) {
+func newProcessComm() (_ *processComm, retErr error) {
 	var (
 		comm processComm
 		err  error
@@ -79,10 +79,24 @@ func newProcessComm() (*processComm, error) {
 	if err != nil {
 		return nil, fmt.Errorf("unable to create init pipe: %w", err)
 	}
+	defer func() {
+		if retErr != nil {
+			comm.initSockParent.Close()
+			comm.initSockChild.Close()
+		}
+	}()
+
 	comm.syncSockParent, comm.syncSockChild, err = newSyncSockpair("sync")
 	if err != nil {
 		return nil, fmt.Errorf("unable to create sync pipe: %w", err)
 	}
+	defer func() {
+		if retErr != nil {
+			comm.syncSockParent.Close()
+			comm.syncSockChild.Close()
+		}
+	}()
+
 	comm.logPipeParent, comm.logPipeChild, err = os.Pipe()
 	if err != nil {
 		return nil, fmt.Errorf("unable to create log pipe: %w", err)