diff --git a/go.mod b/go.mod
index b086e0e0b..9c9dc9f23 100644
--- a/go.mod
+++ b/go.mod
@@ -2,6 +2,11 @@ module github.com/opencontainers/runc
 
 go 1.22
 
+// Suggest toolchain 1.22.4 due to a fix in golang for libcontainer/nsenter/.
+// For more info, see: #4233
+// Note that toolchain does not impose a requirement on other modules using runc.
+toolchain go1.22.4
+
 require (
 	github.com/checkpoint-restore/go-criu/v6 v6.3.0
 	github.com/cilium/ebpf v0.16.0