diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d4fdc9d891c..359cae9b749 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -413,7 +413,7 @@ jobs:
           submodules: true
           # versioning=semver-coerced
           repository: Mbed-TLS/mbedtls
-          ref: v3.6.3
+          ref: v3.6.4
       - name: "mbedtls: make no_test"
         run: make -j3 no_test SHARED=1
         working-directory: mbedtls