diff --git a/Makefile.rhelver b/Makefile.rhelver
index 052fbcb..1baec73 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 10
+RHEL_RELEASE = 11
 
 #
 # Early y+1 numbering
@@ -44,4 +44,4 @@ ifneq ("$(ZSTREAM)", "yes")
   endif
 endif
 
-RTBUILD:=.10
+RTBUILD:=.11
diff --git a/kernel.spec b/kernel.spec
index f8b8bfb..df858e5 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -85,7 +85,7 @@ Summary: The Linux kernel
 #  the --with-release option overrides this setting.)
 %define debugbuildsenabled 1
 
-%global distro_build 10
+%global distro_build 11
 
 %if 0%{?fedora}
 %define secure_boot_arch x86_64
@@ -129,13 +129,13 @@ Summary: The Linux kernel
 %define kversion 5.14
 
 %define rpmversion 5.14.0
-%define pkgrelease 10.rt21.10.el9
+%define pkgrelease 11.rt21.11.el9
 
 # This is needed to do merge window version magic
 %define patchlevel 14
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 10.rt21.10%{?buildid}%{?dist}
+%define specrelease 11.rt21.11%{?buildid}%{?dist}
 
 %define pkg_release %{specrelease}
 
@@ -704,7 +704,7 @@ BuildRequires: lld
 # exact git commit you can run
 #
 # xzcat -qq ${TARBALL} | git get-tar-commit-id
-Source0: linux-5.14.0-10.rt21.10.el9.tar.xz
+Source0: linux-5.14.0-11.rt21.11.el9.tar.xz
 
 Source1: Makefile.rhelver
 
@@ -1431,8 +1431,8 @@ ApplyOptionalPatch()
   fi
 }
 
-%setup -q -n kernel-5.14.0-10.rt21.10.el9 -c
-mv linux-5.14.0-10.rt21.10.el9 linux-%{KVERREL}
+%setup -q -n kernel-5.14.0-11.rt21.11.el9 -c
+mv linux-5.14.0-11.rt21.11.el9 linux-%{KVERREL}
 
 cd linux-%{KVERREL}
 cp -a %{SOURCE1} .
@@ -3081,6 +3081,11 @@ fi
 #
 #
 %changelog
+* Fri Oct 29 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-11.rt21.11.el9]
+- selinux: remove the SELinux lockdown implementation (Ondrej Mosnacek) [1940843 1945581]
+- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Yauheni Kaliuta) [2010494] {CVE-2021-41864}
+- seltests: bpf: test_tunnel: Use ip neigh (Jiri Benc) [2006326]
+
 * Wed Oct 27 2021 Juri Lelli <juri.lelli@redhat.com> [5.14.0-10.rt21.10.el9]
 - block: return ELEVATOR_DISCARD_MERGE if possible (Ming Lei) [1991958]
 - blk-mq: avoid to iterate over stale request (Ming Lei) [2009110]
diff --git a/sources b/sources
index 87313ec..30fadf3 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (kernel-abi-whitelists-5.13.0-1.tar.bz2) = ceba454e1f590c1e4ef4115a75463ae3ac2c2aa7ec85fa14a2669d666c421483a38225ee19d7d72b4ac7032375741408b23543e43588538c80161ec0cf57051c
-SHA512 (linux-5.14.0-10.rt21.10.el9.tar.xz) = c47e9249a412a6aa756d446ef18ca2aaa14fc02b3d03380a0bdbedd1061d663c7b2d7c64e278627f888ecad2ab795b574b2fa23b776f862ee4f282f1fe639ef5
-SHA512 (kernel-abi-stablelists-5.14.0-10.tar.bz2) = 6735e48f96213343faa0cbb68108872a4e157a2bc13b2e91c59b92f3f344f7f83579a93c680c21856ec7b0c12af1b2431819e5ddaa1402960c643545baf5b5c7
-SHA512 (kernel-kabi-dw-5.14.0-10.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914
+SHA512 (linux-5.14.0-11.rt21.11.el9.tar.xz) = a74e40f91b87b0dc649a09e8911ab14a99e4c1b5f9a7bc86884d4b7d06a4562dd771514cfbb46579b6740ee48c8da172b1e84401c995a4cae714efe8984c38d4
+SHA512 (kernel-abi-stablelists-5.14.0-11.tar.bz2) = 0640ce3020f8b41dbfba9be642582a79faa3e8b99554058905baac4bca4adf18f007915b6b682d81bbba417fcb99c02f7c65e06b9ee5acf97d60232e783130c1
+SHA512 (kernel-kabi-dw-5.14.0-11.tar.bz2) = c901529aff636abbc2aa5f289ec098a2a29c8507aa81ee649d1104592b8abad9f495db0e947dc36a84e043708a47373de35156b40b252281ef747f06e19ed914