diff --git a/.gitignore b/.gitignore
index 1ff56e60b..1c332cfc0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-SOURCES/kernel-abi-stablelists-5.14.0-503.33.1.el9_5.tar.bz2
-SOURCES/kernel-kabi-dw-5.14.0-503.33.1.el9_5.tar.bz2
-SOURCES/linux-5.14.0-503.33.1.el9_5.tar.xz
+SOURCES/kernel-abi-stablelists-5.14.0-503.34.1.el9_5.tar.bz2
+SOURCES/kernel-kabi-dw-5.14.0-503.34.1.el9_5.tar.bz2
+SOURCES/linux-5.14.0-503.34.1.el9_5.tar.xz
 SOURCES/nvidiagpuoot001.x509
 SOURCES/olima1.x509
 SOURCES/olimaca1.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index ee11c8267..4e318a298 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,6 +1,6 @@
-74ef2bfc9416a37cd87627462e02fd6151301209 SOURCES/kernel-abi-stablelists-5.14.0-503.33.1.el9_5.tar.bz2
-b529f954bba06ca49a62e57c3db4f93bd2ee30c2 SOURCES/kernel-kabi-dw-5.14.0-503.33.1.el9_5.tar.bz2
-bed437b4a5784c6136bd6658ea097b11f3106ffb SOURCES/linux-5.14.0-503.33.1.el9_5.tar.xz
+2db3601b42f0d46a7fe648e5a6c062fe380e37e2 SOURCES/kernel-abi-stablelists-5.14.0-503.34.1.el9_5.tar.bz2
+0a98fb5b1c1d2c14cd9c7034569fe87d891843df SOURCES/kernel-kabi-dw-5.14.0-503.34.1.el9_5.tar.bz2
+839b509b426c2c0a7246c107c15e1649bb5566f8 SOURCES/linux-5.14.0-503.34.1.el9_5.tar.xz
 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509
 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index bbb981fc2..1409df75f 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 5
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 503.33.1
+RHEL_RELEASE = 503.34.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog
index d1a378dea..39c5cbe56 100644
--- a/SOURCES/kernel.changelog
+++ b/SOURCES/kernel.changelog
@@ -1,3 +1,8 @@
+* Mon Mar 17 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
+- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
+- crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]
+Resolves: RHEL-70643, RHEL-82734
+
 * Wed Mar 12 2025 Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
 - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
 - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 973e6d269..710939fe2 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 503.33.1
+%define pkgrelease 503.34.1
 %define kversion 5
-%define tarfile_release 5.14.0-503.33.1.el9_5
+%define tarfile_release 5.14.0-503.34.1.el9_5
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 503.33.1%{?buildid}%{?dist}
+%define specrelease 503.34.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-503.33.1.el9_5
+%define kabiversion 5.14.0-503.34.1.el9_5
 
 #
 # End of genspec.sh variables
@@ -3795,7 +3795,7 @@ fi
 #
 #
 %changelog
-* Thu Mar 20 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 5.14.0-503.33.1
+* Thu Mar 27 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 5.14.0-503.34.1
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -3806,10 +3806,14 @@ fi
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Thu Mar 20 2025 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-503.33.1
+* Thu Mar 27 2025 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-503.34.1
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 
+* Mon Mar 17 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
+- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
+- crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]
+
 * Wed Mar 12 2025 Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
 - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
 - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]