diff --git a/domain/schema_validator.go b/domain/schema_validator.go
index 6f028fdca2e70..495306a6ff936 100644
--- a/domain/schema_validator.go
+++ b/domain/schema_validator.go
@@ -70,6 +70,7 @@ type schemaValidator struct {
 	mux                sync.RWMutex
 	lease              time.Duration
 	latestSchemaVer    int64
+	restartSchemaVer   int64
 	latestInfoSchema   infoschema.InfoSchema
 	do                 *Domain
 	latestSchemaExpire time.Time
@@ -110,6 +111,12 @@ func (s *schemaValidator) Restart() {
 	s.mux.Lock()
 	defer s.mux.Unlock()
 	s.isStarted = true
+	if s.do != nil {
+		// When this instance reconnects PD, we should record the latest schema verion after mustReload(),
+		// to prevent write txns using a stale schema version by aborting them before commit.
+		// However, the problem still exists for read-only txns.
+		s.restartSchemaVer = s.do.InfoSchema().SchemaMetaVersion()
+	}
 }
 
 func (s *schemaValidator) Reset() {
@@ -119,6 +126,7 @@ func (s *schemaValidator) Reset() {
 	s.isStarted = true
 	s.latestSchemaVer = 0
 	s.deltaSchemaInfos = s.deltaSchemaInfos[:0]
+	s.restartSchemaVer = 0
 }
 
 func (s *schemaValidator) Update(leaseGrantTS uint64, oldVer, currVer int64, change *transaction.RelatedSchemaChange) {
@@ -233,6 +241,12 @@ func (s *schemaValidator) Check(txnTS uint64, schemaVer int64, relatedPhysicalTa
 		logutil.BgLogger().Info("the schema validator stopped before checking")
 		return nil, ResultUnknown
 	}
+
+	if schemaVer < s.restartSchemaVer {
+		logutil.BgLogger().Info("the schema version is too old, TiDB and PD maybe unhealthy after the transaction started",
+			zap.Int64("schemaVer", schemaVer))
+		return nil, ResultFail
+	}
 	if s.lease == 0 {
 		return nil, ResultSucc
 	}