diff --git a/Makefile.rhelver b/Makefile.rhelver
index f25d7f0..bbe7a8e 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 19
+RHEL_RELEASE = 20
 
 #
 # Early y+1 numbering
@@ -44,4 +44,4 @@ ifneq ("$(ZSTREAM)", "yes")
   endif
 endif
 
-RTBUILD:=.19
+RTBUILD:=.20
diff --git a/kernel.spec b/kernel.spec
index d5ac285..c12e400 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -85,7 +85,7 @@ Summary: The Linux kernel
 #  the --with-release option overrides this setting.)
 %define debugbuildsenabled 1
 
-%global distro_build 19
+%global distro_build 20
 
 %if 0%{?fedora}
 %define secure_boot_arch x86_64
@@ -129,13 +129,13 @@ Summary: The Linux kernel
 %define kversion 5.14
 
 %define rpmversion 5.14.0
-%define pkgrelease 19.rt21.19.el9
+%define pkgrelease 20.rt21.20.el9
 
 # This is needed to do merge window version magic
 %define patchlevel 14
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 19.rt21.19%{?buildid}%{?dist}
+%define specrelease 20.rt21.20%{?buildid}%{?dist}
 
 %define pkg_release %{specrelease}
 
@@ -704,7 +704,7 @@ BuildRequires: lld
 # exact git commit you can run
 #
 # xzcat -qq ${TARBALL} | git get-tar-commit-id
-Source0: linux-5.14.0-19.rt21.19.el9.tar.xz
+Source0: linux-5.14.0-20.rt21.20.el9.tar.xz
 
 Source1: Makefile.rhelver
 
@@ -1432,8 +1432,8 @@ ApplyOptionalPatch()
   fi
 }
 
-%setup -q -n kernel-5.14.0-19.rt21.19.el9 -c
-mv linux-5.14.0-19.rt21.19.el9 linux-%{KVERREL}
+%setup -q -n kernel-5.14.0-20.rt21.20.el9 -c
+mv linux-5.14.0-20.rt21.20.el9 linux-%{KVERREL}
 
 cd linux-%{KVERREL}
 cp -a %{SOURCE1} .
@@ -3080,6 +3080,9 @@ fi
 #
 #
 %changelog
+* Wed Nov 24 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-20.rt21.20.el9]
+- powerpc/svm: Don't issue ultracalls if !mem_encrypt_active() (Herton R. Krzesinski) [2025186]
+
 * Mon Nov 22 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-19.rt21.19.el9]
 - net: core: don't call SIOCBRADD/DELIF for non-bridge devices (Ivan Vecera) [2008927]
 - net: bridge: fix ioctl old_deviceless bridge argument (Ivan Vecera) [2008927]
diff --git a/sources b/sources
index 6f0cfc3..ee3299a 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (kernel-abi-whitelists-5.13.0-1.tar.bz2) = ceba454e1f590c1e4ef4115a75463ae3ac2c2aa7ec85fa14a2669d666c421483a38225ee19d7d72b4ac7032375741408b23543e43588538c80161ec0cf57051c
-SHA512 (linux-5.14.0-19.rt21.19.el9.tar.xz) = 43ad523bc9c980b6d77fec8842d2dae2f91df87f08e4942ee333fd4c77f43f33f25d4d0cf773bf6d2c8b30e98e863399a0787e17fcfb0bbf74d6c18fb30919c2
-SHA512 (kernel-abi-stablelists-5.14.0-19.tar.bz2) = 8e03c7f3445ee51ae17cf5217f458c0ae1c690f7d02128567f41e654091a4849b4521d932a2be22ff70e873e33549d7c5ec1f5e55927f21fd386ba76a3753308
-SHA512 (kernel-kabi-dw-5.14.0-19.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914
+SHA512 (linux-5.14.0-20.rt21.20.el9.tar.xz) = fd190d444c2d90f4faf2155143f547eb37fd35d83d080076787e9b8a4c66cdc83db202bd55cf78681b632f27b4e7f0bc5c9e0a4aa1a41dbcede68284fa246aa8
+SHA512 (kernel-abi-stablelists-5.14.0-20.tar.bz2) = 905321c8beee33206169056c30ec8baae8a5bc0c5c4e9762e5a4729c845a4315f8de4d804b27589451975abef245b64eacd57a4ed7cb96f9754e7049f87d2ef7
+SHA512 (kernel-kabi-dw-5.14.0-20.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914