diff --git a/gating.yaml b/gating.yaml
index 1d724d0..167c7ff 100644
--- a/gating.yaml
+++ b/gating.yaml
@@ -4,8 +4,3 @@ product_versions:
 decision_context: osci_compose_gate
 rules:
   - !PassingTestCaseRule {test_case_name: cki.tier1-x86_64.functional}
-  - !PassingTestCaseRule {test_case_name: s1-aws-ci_x86_64.brew-build.tier1.functional}
-  - !PassingTestCaseRule {test_case_name: s1-aws-ci_aarch64.brew-build.tier1.functional}
-  - !PassingTestCaseRule {test_case_name: s1-azure-ci_x86_64.brew-build.tier1.functional}
-  - !PassingTestCaseRule {test_case_name: s1-azure-ci_aarch64.brew-build.tier1.functional}
-  - !PassingTestCaseRule {test_case_name: s1-gcp-ci.brew-build.tier1.functional}
diff --git a/kernel.spec b/kernel.spec
index fed9385..c288b6b 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -12,7 +12,7 @@
 # change below to w4T.xzdio):
 %define _binary_payload w3T.xzdio
 
-%global distro_build 514
+%global distro_build 515
 
 # Sign the x86_64 kernel for secure boot authentication
 %ifarch x86_64 aarch64 s390x ppc64le
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 514.rt7.303.el8
+%define pkgrelease 515.rt7.304.el8
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 514.rt7.303%{?dist}
+%define specrelease 515.rt7.304%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -147,7 +147,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .303
+%global rtbuild .304
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2698,6 +2698,40 @@ fi
 #
 #
 %changelog
+* Mon Sep 25 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-515.rt7.304.el8]
+- [rt] build kernel-rt-4.18.0-515.rt7.304.el8 [RHEL-5332]
+- s390/dasd: fix hanging device after quiesce/resume (Tobias Huschle) [RHEL-2838]
+- s390/dasd: fix hanging device after request requeue (Tobias Huschle) [RHEL-2830]
+- s390/dasd: fix command reject error on ESE devices (Tobias Huschle) [RHEL-2850]
+- s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-2831]
+- s390: add z16 elf platform (Tobias Huschle) [RHEL-2854]
+- s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-2410]
+- powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Mamatha Inamdar) [2227601]
+- arm64: kdump: Remove custom linux,usable-memory-range handling (Baoquan He) [RHEL-2307]
+- arm64: kdump: Remove custom linux,elfcorehdr handling (Baoquan He) [RHEL-2307]
+- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Dean Nelson) [RHEL-1784] {CVE-2022-45919}
+- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Dean Nelson) [RHEL-1841] {CVE-2022-45884}
+- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Dean Nelson) [RHEL-1842] {CVE-2022-45886}
+- media: dvb_ca_en50221: fix a size write bug (Dean Nelson) [RHEL-1784]
+- media: dvbdev: fix refcnt bug (Dean Nelson) [RHEL-1841]
+- media: dvbdev: adopts refcnt to avoid UAF (Dean Nelson) [RHEL-1841]
+- media: dvbdev: fix error logic at dvb_register_device() (Dean Nelson) [RHEL-1841]
+- media: dvb_net: avoid speculation from net slot (Dean Nelson) [RHEL-1842]
+- media: dvb_ca_en50221: avoid speculation from CA slot (Dean Nelson) [RHEL-1784]
+- media: dvbdev: Fix memleak in dvb_register_device (Dean Nelson) [RHEL-1841]
+- media: media/dvb: Use kmemdup rather than duplicating its implementation (Dean Nelson) [RHEL-1841]
+- media: dvbdev: remove double-unlock (Dean Nelson) [RHEL-1841]
+- media: dvb-core: fix epoll() by calling poll_wait first (Dean Nelson) [RHEL-1784]
+- media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl() (Dean Nelson) [RHEL-1784]
+- drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttilä) [2231934]
+- gfs2: conversion deadlock do_promote bypass (Bob Peterson) [2225228]
+- gfs2: do_promote cleanup (Andreas Gruenbacher) [2225228]
+- gfs2: Make use of list_is_first (Andreas Gruenbacher) [2225228]
+- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227916]
+- Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227916]
+- x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227916]
+- fs: don't audit the capability check in simple_xattr_list() (Andrey Albershteyn) [RHEL-863]
+
 * Wed Sep 20 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-514.rt7.303.el8]
 - [rt] build kernel-rt-4.18.0-514.rt7.303.el8 [2180997]
 - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)
diff --git a/sources b/sources
index d80f56f..08a446e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-514.rt7.303.el8.tar.xz) = 32ada8a5d981808d6845f1d3abe67d2306e5fa048c87dcafa7c5860434dddd9a1d5f754679f6a46583bd6340a5467de2d05f56f31328cc7e992b721885681ac0
+SHA512 (linux-4.18.0-515.rt7.304.el8.tar.xz) = 458a4afe0e5224c3e6ff44570ce32ff45b250b50ae48a22a5a27234e30c0d7560e4a1cddf30f0e93c8559cdd2929db2200b938cb4d89c7a7063c0ec4a25a28fb