diff --git a/Makefile.rhelver b/Makefile.rhelver
index 308aa6e..b692b4c 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 26
+RHEL_RELEASE = 27
 
 #
 # Early y+1 numbering
@@ -44,4 +44,4 @@ ifneq ("$(ZSTREAM)", "yes")
   endif
 endif
 
-RTBUILD:=.26
+RTBUILD:=.27
diff --git a/kernel-rt-x86_64-debug-rhel.config b/kernel-rt-x86_64-debug-rhel.config
index dc958a4..36ec117 100644
--- a/kernel-rt-x86_64-debug-rhel.config
+++ b/kernel-rt-x86_64-debug-rhel.config
@@ -4426,6 +4426,7 @@ CONFIG_PPS_CLIENT_PARPORT=m
 # CONFIG_PPS_DEBUG is not set
 CONFIG_PPS=y
 CONFIG_PPTP=m
+CONFIG_PREEMPT_DYNAMIC=y
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
 # CONFIG_PREEMPTIRQ_EVENTS is not set
 # CONFIG_PREEMPT is not set
diff --git a/kernel-rt-x86_64-rhel.config b/kernel-rt-x86_64-rhel.config
index ea3270e..c0987c5 100644
--- a/kernel-rt-x86_64-rhel.config
+++ b/kernel-rt-x86_64-rhel.config
@@ -4406,6 +4406,7 @@ CONFIG_PPS_CLIENT_PARPORT=m
 # CONFIG_PPS_DEBUG is not set
 CONFIG_PPS=y
 CONFIG_PPTP=m
+CONFIG_PREEMPT_DYNAMIC=y
 # CONFIG_PREEMPTIRQ_DELAY_TEST is not set
 # CONFIG_PREEMPTIRQ_EVENTS is not set
 # CONFIG_PREEMPT is not set
diff --git a/kernel.spec b/kernel.spec
index a9c158b..440c76e 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -85,7 +85,7 @@ Summary: The Linux kernel
 #  the --with-release option overrides this setting.)
 %define debugbuildsenabled 1
 
-%global distro_build 26
+%global distro_build 27
 
 %if 0%{?fedora}
 %define secure_boot_arch x86_64
@@ -129,13 +129,13 @@ Summary: The Linux kernel
 %define kversion 5.14
 
 %define rpmversion 5.14.0
-%define pkgrelease 26.rt21.26.el9
+%define pkgrelease 27.rt21.27.el9
 
 # This is needed to do merge window version magic
 %define patchlevel 14
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 26.rt21.26%{?buildid}%{?dist}
+%define specrelease 27.rt21.27%{?buildid}%{?dist}
 
 %define pkg_release %{specrelease}
 
@@ -704,7 +704,7 @@ BuildRequires: lld
 # exact git commit you can run
 #
 # xzcat -qq ${TARBALL} | git get-tar-commit-id
-Source0: linux-5.14.0-26.rt21.26.el9.tar.xz
+Source0: linux-5.14.0-27.rt21.27.el9.tar.xz
 
 Source1: Makefile.rhelver
 
@@ -1432,8 +1432,8 @@ ApplyOptionalPatch()
   fi
 }
 
-%setup -q -n kernel-5.14.0-26.rt21.26.el9 -c
-mv linux-5.14.0-26.rt21.26.el9 linux-%{KVERREL}
+%setup -q -n kernel-5.14.0-27.rt21.27.el9 -c
+mv linux-5.14.0-27.rt21.27.el9 linux-%{KVERREL}
 
 cd linux-%{KVERREL}
 cp -a %{SOURCE1} .
@@ -3080,6 +3080,35 @@ fi
 #
 #
 %changelog
+* Wed Dec 08 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-27.rt21.27.el9]
+- x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Wander Lairson Costa) [2002637]
+- Enable PREEMPT_DYNAMIC for all but s390x (Phil Auld) [2019472]
+- preempt: Restore preemption model selection configs (Phil Auld) [2019472]
+- sched: Provide Kconfig support for default dynamic preempt mode (Phil Auld) [2019472]
+- x86/sgx: Add TAINT_TECH_PREVIEW for virtual EPC (Wander Lairson Costa) [2025959]
+- x86/sgx: mark tech preview (Wander Lairson Costa) [2025959]
+- ipv6: When forwarding count rx stats on the orig netdev (Hangbin Liu) [2025457]
+- ipv6: make exception cache less predictible (Hangbin Liu) [2025457]
+- icmp: fix icmp_ext_echo_iio parsing in icmp_build_probe (Guillaume Nault) [2024572]
+- net: prefer socket bound to interface when not in VRF (Guillaume Nault) [2024572]
+- net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Guillaume Nault) [2024572]
+- nexthop: Fix memory leaks in nexthop notification chain listeners (Guillaume Nault) [2024572]
+- nexthop: Fix division by zero while replacing a resilient group (Guillaume Nault) [2024572]
+- ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Guillaume Nault) [2024572]
+- crypto: ccp - Make use of the helper macro kthread_run() (Vladis Dronov) [1997595]
+- crypto: ccp - Fix whitespace in sev_cmd_buffer_len() (Vladis Dronov) [1997595]
+- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Vladis Dronov) [1997595] {CVE-2021-3744 CVE-2021-3764}
+- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Guillaume Nault) [2023271]
+- scsi: megaraid: Clean up some inconsistent indenting (Tomas Henzl) [1879402]
+- scsi: megaraid: Fix Coccinelle warning (Tomas Henzl) [1879402]
+- scsi: megaraid_sas: Driver version update to 07.719.03.00-rc1 (Tomas Henzl) [1879402]
+- scsi: megaraid_sas: Add helper functions for irq_context (Tomas Henzl) [1879402]
+- scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [1879402]
+- tpm: ibmvtpm: Avoid error message when process gets signal while waiting (Štěpán Horáček) [1983089]
+- char: tpm: cr50_i2c: convert to new probe interface (Štěpán Horáček) [1983089]
+- char: tpm: Kconfig: remove bad i2c cr50 select (Štěpán Horáček) [1983089]
+- redhat: Fix rpminspect spec filename test for RT (Juri Lelli)
+
 * Tue Dec 07 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-26.rt21.26.el9]
 - redhat/configs: enable CONFIG_CEPH_FSCACHE (Jeffrey Layton) [2017798]
 - ceph: add a new metric to keep track of remote object copies (Jeffrey Layton) [2017798]
diff --git a/rpminspect.yaml b/rpminspect.yaml
index f62742a..c97b655 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -11,3 +11,6 @@ emptyrpm:
         - kernel-zfcpdump
         - kernel-zfcpdump-devel-matched
         - kernel-zfcpdump-modules
+specname:
+    match: prefix
+    primary: filename
diff --git a/sources b/sources
index c7037d6..2a0aed7 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (kernel-abi-whitelists-5.13.0-1.tar.bz2) = ceba454e1f590c1e4ef4115a75463ae3ac2c2aa7ec85fa14a2669d666c421483a38225ee19d7d72b4ac7032375741408b23543e43588538c80161ec0cf57051c
-SHA512 (linux-5.14.0-26.rt21.26.el9.tar.xz) = 50767380bfce0176a4454e35b8e17fe701577e638bd45fe0394eafd6b395fc3b37cfdb294ac0031a198256fd9f86ee6f734111b2c7a25f698be6dea7e3989a07
-SHA512 (kernel-abi-stablelists-5.14.0-26.tar.bz2) = 715340c55a7f9135fccf45ae585e157e05fc9e40f1e0bf24d87dae75befbe9c11175f061e4196683ae25a7a2e8c52474bb0445dea8f6235f09d1e61d87367f07
-SHA512 (kernel-kabi-dw-5.14.0-26.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914
+SHA512 (linux-5.14.0-27.rt21.27.el9.tar.xz) = 9de3b5e73a9758022a154f7e672e0a0ea2e77dfb67de13af29ecb30f0d76552febe4567eb68dd5ca2fb40733dcde8ca6776f34e99ebb8a3df3a1c8f298c741ae
+SHA512 (kernel-abi-stablelists-5.14.0-27.tar.bz2) = ab15a1786e758f996c9b7db743f00f1e6e4b139fbc7275b3e3303ac92b6c21007943baab2e9d2fe86a2470af8b53e6020db01de0b3b9fa2004d90dd2a245da4b
+SHA512 (kernel-kabi-dw-5.14.0-27.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914