diff --git a/Makefile.rhelver b/Makefile.rhelver
index d2a347d9a..0d7171b47 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 1
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 68
+RHEL_RELEASE = 69
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 054cfbc2d..5518cd91b 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -626,6 +626,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 50e48284a..0d154d22f 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -626,6 +626,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-automotive-debug-rhel.config b/kernel-aarch64-automotive-debug-rhel.config
index af0ae7e6b..7a0411f9e 100644
--- a/kernel-aarch64-automotive-debug-rhel.config
+++ b/kernel-aarch64-automotive-debug-rhel.config
@@ -671,6 +671,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-automotive-rhel.config b/kernel-aarch64-automotive-rhel.config
index 16fc31331..6eeb757e2 100644
--- a/kernel-aarch64-automotive-rhel.config
+++ b/kernel-aarch64-automotive-rhel.config
@@ -671,6 +671,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 47d4f12bb..3d7d99ec2 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -624,6 +624,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 1465f18eb..2d490a15f 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -624,6 +624,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index eec537f21..729b28a97 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -626,6 +626,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 86e8e931b..707bf3a15 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -626,6 +626,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 0502f1db1..8bb24c60e 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -624,6 +624,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 1e457e19c..826d9be73 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -624,6 +624,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index d07c02e1b..a110d1403 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -468,6 +468,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 550b7caeb..669a06674 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -468,6 +468,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index abe0cfa51..af0f5abc4 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -467,6 +467,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index ba43d65f8..ea7f69feb 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -467,6 +467,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 3a524bffc..af4502e06 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -468,6 +468,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-automotive-debug-rhel.config b/kernel-x86_64-automotive-debug-rhel.config
index 8593191fb..15227161c 100644
--- a/kernel-x86_64-automotive-debug-rhel.config
+++ b/kernel-x86_64-automotive-debug-rhel.config
@@ -507,6 +507,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-automotive-rhel.config b/kernel-x86_64-automotive-rhel.config
index 2d3008735..f5af19e6c 100644
--- a/kernel-x86_64-automotive-rhel.config
+++ b/kernel-x86_64-automotive-rhel.config
@@ -507,6 +507,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 738d72441..a3843eff4 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -496,6 +496,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index abdbacbf8..7ee8658c0 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -496,6 +496,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 97b581fc0..5b4b41fab 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -496,6 +496,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 09f3f4dd8..27bd4541a 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -496,6 +496,7 @@ CONFIG_BLK_CGROUP_FC_APPID=y
 CONFIG_BLK_CGROUP_IOCOST=y
 CONFIG_BLK_CGROUP_IOLATENCY=y
 # CONFIG_BLK_CGROUP_IOPRIO is not set
+CONFIG_BLK_CGROUP_PUNT_BIO=y
 CONFIG_BLK_CGROUP=y
 CONFIG_BLK_DEBUG_FS=y
 # CONFIG_BLK_DEV_3W_XXXX_RAID is not set
diff --git a/kernel.changelog b/kernel.changelog
index e15bcf911..b55ef7413 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,69 @@
+* Fri Mar 28 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-69.el10]
+- redhat/configs: Enable CONFIG_BLK_CGROUP_PUNT_BIO (Neal Gompa) [RHEL-79711]
+- block/Kconfig: Allow selecting BLK_CGROUP_PUNT_BIO (Neal Gompa) [RHEL-79711]
+- perf script: Fix hangup in offline flamegraph report (Michael Petlan) [RHEL-57021]
+- perf script: force stdin for flamegraph in live mode (Michael Petlan) [RHEL-57021]
+- smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83856]
+- KVM: selftests: Allow running a single iteration of dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Fix an off-by-one in the number of dirty_log_test iterations (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Set per-iteration variables at the start of each iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Tighten checks around prev iter's last dirty page in ring (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Ensure guest writes min number of pages in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: sefltests: Verify value of dirty_log_test last page isn't bogus (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Collect *all* dirty entries in each dirty_log_test iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Print (previous) last_page on dirty page value mismatch (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Use continue to handle all "pass" scenarios in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Post to sem_vcpu_stop if and only if vcpu_stop is true (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Keep dirty_log_test vCPU in guest until it needs to stop (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Honor "stop" request in dirty ring test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Limit dirty_log_test's s390x workaround to s390x (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Continuously reap dirty ring while vCPU is running (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Read per-page value into local var when verifying dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Precisely track number of dirty/clear pages for each iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Drop stale srandom() initialization from dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Drop signal/kick from dirty ring testcase (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Sync dirty_log_test iteration to guest *before* resuming (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Support multiple write retires in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-58941]
+- KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-58941]
+- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-80114] {CVE-2024-56690}
+- erofs: fix blksize < PAGE_SIZE for file-backed mounts (Ian Kent) [RHEL-82421] {CVE-2024-56750}
+- platform/x86/intel/vsec: Add support for Panther Lake (Steve Best) [RHEL-47411]
+- bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-73803]
+- ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-80554]
+- ice: init flow director before RDMA (Petr Oros) [RHEL-80554]
+- ice: simplify VF MSI-X managing (Petr Oros) [RHEL-80554]
+- ice: enable_rdma devlink param (Petr Oros) [RHEL-80554]
+- ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-80554]
+- ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-80554]
+- ice: get rid of num_lan_msix field (Petr Oros) [RHEL-80554]
+- ice: remove splitting MSI-X between features (Petr Oros) [RHEL-80554]
+- ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-80554]
+- ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-80554]
+- ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-80554]
+- ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-80554]
+- ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-80554]
+- ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81574] {CVE-2025-21765}
+- net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81574] {CVE-2025-21765}
+- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Exclude __tracepoints data from ENDBR checks (Radomir Vrbovsky) [RHEL-80715]
+- kbuild: Add Propeller configuration for kernel build (Radomir Vrbovsky) [RHEL-80715]
+- AutoFDO: Enable machine function split optimization for AutoFDO (Radomir Vrbovsky) [RHEL-80715]
+- AutoFDO: Enable -ffunction-sections for the AutoFDO build (Radomir Vrbovsky) [RHEL-80715]
+- vmlinux.lds.h: Add markers for text_unlikely and text_hot sections (Radomir Vrbovsky) [RHEL-80715]
+- openrisc: place exception table at the head of vmlinux (Radomir Vrbovsky) [RHEL-80715]
+- vmlinux.lds.h: Adjust symbol ordering in text output section (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Fix unreachable instruction warnings for weak functions (Radomir Vrbovsky) [RHEL-80715]
+- kbuild: Add AutoFDO support for Clang build (Radomir Vrbovsky) [RHEL-80715]
+- reiserfs: The last commit (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Also include tools/include/uapi (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Detect non-relocated text references (Radomir Vrbovsky) [RHEL-80715]
+- arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl) [RHEL-80866]
+- intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (Steve Best) [RHEL-79459]
+- intel_idle: add Clearwater Forest SoC support (Steve Best) [RHEL-79459]
+- selftests: fib_nexthops: do not mark skipped tests as failed (Hangbin Liu) [RHEL-80288]
+Resolves: RHEL-47411, RHEL-57021, RHEL-58941, RHEL-73803, RHEL-79459, RHEL-79711, RHEL-80114, RHEL-80288, RHEL-80554, RHEL-80715, RHEL-80866, RHEL-81574, RHEL-82421, RHEL-83856
+
 * Mon Mar 24 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-68.el10]
 - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (Steve Best) [RHEL-79463]
 - platform/x86: intel/pmc: Fix ioremap() of bad address (Steve Best) [RHEL-79463]
diff --git a/kernel.spec b/kernel.spec
index 0700e1fa3..74a73aa4a 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -164,15 +164,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 68
+%define pkgrelease 69
 %define kversion 6
-%define tarfile_release 6.12.0-68.el10
+%define tarfile_release 6.12.0-69.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 68%{?buildid}%{?dist}
+%define specrelease 69%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-68.el10
+%define kabiversion 6.12.0-69.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4358,7 +4358,7 @@ fi\
 #
 #
 %changelog
-* Sat Mar 29 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-68
+* Tue Apr 01 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-69
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4369,10 +4369,75 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Sat Mar 29 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-68
+* Tue Apr 01 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-69
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 
+* Fri Mar 28 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-69.el10]
+- redhat/configs: Enable CONFIG_BLK_CGROUP_PUNT_BIO (Neal Gompa) [RHEL-79711]
+- block/Kconfig: Allow selecting BLK_CGROUP_PUNT_BIO (Neal Gompa) [RHEL-79711]
+- perf script: Fix hangup in offline flamegraph report (Michael Petlan) [RHEL-57021]
+- perf script: force stdin for flamegraph in live mode (Michael Petlan) [RHEL-57021]
+- smb: client: fix regression with guest option (Paulo Alcantara) [RHEL-83856]
+- KVM: selftests: Allow running a single iteration of dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Fix an off-by-one in the number of dirty_log_test iterations (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Set per-iteration variables at the start of each iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Tighten checks around prev iter's last dirty page in ring (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Ensure guest writes min number of pages in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: sefltests: Verify value of dirty_log_test last page isn't bogus (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Collect *all* dirty entries in each dirty_log_test iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Print (previous) last_page on dirty page value mismatch (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Use continue to handle all "pass" scenarios in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Post to sem_vcpu_stop if and only if vcpu_stop is true (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Keep dirty_log_test vCPU in guest until it needs to stop (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Honor "stop" request in dirty ring test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Limit dirty_log_test's s390x workaround to s390x (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Continuously reap dirty ring while vCPU is running (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Read per-page value into local var when verifying dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Precisely track number of dirty/clear pages for each iteration (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Drop stale srandom() initialization from dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Drop signal/kick from dirty ring testcase (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Sync dirty_log_test iteration to guest *before* resuming (Maxim Levitsky) [RHEL-58941]
+- KVM: selftests: Support multiple write retires in dirty_log_test (Maxim Levitsky) [RHEL-58941]
+- KVM: VMX: read the PML log in the same order as it was written (Maxim Levitsky) [RHEL-58941]
+- KVM: VMX: refactor PML terminology (Maxim Levitsky) [RHEL-58941]
+- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-80114] {CVE-2024-56690}
+- erofs: fix blksize < PAGE_SIZE for file-backed mounts (Ian Kent) [RHEL-82421] {CVE-2024-56750}
+- platform/x86/intel/vsec: Add support for Panther Lake (Steve Best) [RHEL-47411]
+- bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-73803]
+- ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-80554]
+- ice: init flow director before RDMA (Petr Oros) [RHEL-80554]
+- ice: simplify VF MSI-X managing (Petr Oros) [RHEL-80554]
+- ice: enable_rdma devlink param (Petr Oros) [RHEL-80554]
+- ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-80554]
+- ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-80554]
+- ice: get rid of num_lan_msix field (Petr Oros) [RHEL-80554]
+- ice: remove splitting MSI-X between features (Petr Oros) [RHEL-80554]
+- ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-80554]
+- ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-80554]
+- ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-80554]
+- ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-80554]
+- ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-80554]
+- ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81574] {CVE-2025-21765}
+- net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81574] {CVE-2025-21765}
+- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Exclude __tracepoints data from ENDBR checks (Radomir Vrbovsky) [RHEL-80715]
+- kbuild: Add Propeller configuration for kernel build (Radomir Vrbovsky) [RHEL-80715]
+- AutoFDO: Enable machine function split optimization for AutoFDO (Radomir Vrbovsky) [RHEL-80715]
+- AutoFDO: Enable -ffunction-sections for the AutoFDO build (Radomir Vrbovsky) [RHEL-80715]
+- vmlinux.lds.h: Add markers for text_unlikely and text_hot sections (Radomir Vrbovsky) [RHEL-80715]
+- openrisc: place exception table at the head of vmlinux (Radomir Vrbovsky) [RHEL-80715]
+- vmlinux.lds.h: Adjust symbol ordering in text output section (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Fix unreachable instruction warnings for weak functions (Radomir Vrbovsky) [RHEL-80715]
+- kbuild: Add AutoFDO support for Clang build (Radomir Vrbovsky) [RHEL-80715]
+- reiserfs: The last commit (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Also include tools/include/uapi (Radomir Vrbovsky) [RHEL-80715]
+- objtool: Detect non-relocated text references (Radomir Vrbovsky) [RHEL-80715]
+- arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl) [RHEL-80866]
+- intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (Steve Best) [RHEL-79459]
+- intel_idle: add Clearwater Forest SoC support (Steve Best) [RHEL-79459]
+- selftests: fib_nexthops: do not mark skipped tests as failed (Hangbin Liu) [RHEL-80288]
+
 * Mon Mar 24 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-68.el10]
 - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (Steve Best) [RHEL-79463]
 - platform/x86: intel/pmc: Fix ioremap() of bad address (Steve Best) [RHEL-79463]
diff --git a/sources b/sources
index 37e43bbcf..10d984ae7 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-68.el10.tar.xz) = 9f799faccffe0bc2b6c2b7fea0298af44730c7235ea118e4c60d37f29eef990bdd4303960f631eafd7c871ccf888118531c9197313e4f5dd7bfa3b70dbf3dbaf
-SHA512 (kernel-abi-stablelists-6.12.0-68.el10.tar.xz) = 2be0923c6ff37ad8cc9fa1134d51366baea59d0d6b118c7cb189dc0e1b7f9f297423b85829ae1576c34e1384bc524f5225af8f48b084779b06795ba2eefa7cab
-SHA512 (kernel-kabi-dw-6.12.0-68.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d
+SHA512 (linux-6.12.0-69.el10.tar.xz) = babe022ad038ae58255d159ae5cbcb5a6a1e95aacbebaafe3e3294a4f9b35013b035e0800b7bc1f553896d929517991f9e074a390070c553d61fb3e4cdeda6a4
+SHA512 (kernel-abi-stablelists-6.12.0-69.el10.tar.xz) = 2c96a9ddbe7e60f4f31e8bc208cafea0c9190ef5d2beabe008fbdf22e04da99ffa719d7d1c654751cb5f8598cde5e1220e720664971bbdc2a6af9003d4d2f270
+SHA512 (kernel-kabi-dw-6.12.0-69.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d