diff --git a/.gitignore b/.gitignore
index 69f6b190b..6ee691884 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,7 +1,7 @@
 fedoraimaca.x509
-kernel-abi-stablelists-6.12.0-55.29.1.el10_0.tar.xz
-kernel-kabi-dw-6.12.0-55.29.1.el10_0.tar.xz
-linux-6.12.0-55.29.1.el10_0.tar.xz
+kernel-abi-stablelists-6.12.0-55.30.1.el10_0.tar.xz
+kernel-kabi-dw-6.12.0-55.30.1.el10_0.tar.xz
+linux-6.12.0-55.30.1.el10_0.tar.xz
 nvidiagpuoot001.x509
 olima1.x509
 olimaca1.x509
diff --git a/Makefile.rhelver b/Makefile.rhelver
index 4b23352d6..776a64b1f 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 55.29.1
+RHEL_RELEASE = 55.30.1
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel.changelog b/kernel.changelog
index ae22da4aa..94e070020 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -5612,3 +5612,4 @@ Resolves: RHEL-56700
 - serial: 8250: Switch to nbcon console (John Ogness)
 - Linux v6.12-rc4
 Resolves: RHEL-56700
+
diff --git a/kernel.spec b/kernel.spec
index 8e6a0b1c2..443c762bc 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 55.29.1
+%define pkgrelease 55.30.1
 %define kversion 6
-%define tarfile_release 6.12.0-55.29.1.el10_0
+%define tarfile_release 6.12.0-55.30.1.el10_0
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 55.29.1%{?buildid}%{?dist}
+%define specrelease 55.30.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-55.29.1.el10_0
+%define kabiversion 6.12.0-55.30.1.el10_0
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4360,7 +4360,7 @@ fi\
 #
 #
 %changelog
-* Fri Aug 29 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-55.29.1
+* Tue Sep 09 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-55.30.1
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4371,10 +4371,25 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Fri Aug 29 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.29.1
+* Tue Sep 09 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.30.1
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 
+* Wed Sep 03 2025 Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.30.1.el10_0]
+- tipc: Fix use-after-free in tipc_conn_close(). - CVE-2025-38464
+- Bump internal version to 55.30.1
+- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - CVE-2025-37823
+- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
+- s390/pci: Fix handling of isolated VFs
+- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
+- s390/pci: Fix SR-IOV for PFs initially in standby
+- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction - CVE-2025-38211
+- udp: Fix memory accounting leak. - CVE-2025-22058
+- udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
+- ext4: only dirty folios when data journaling regular files - CVE-2025-38220
+- vsock: Fix transport_* TOCTOU - CVE-2025-38461
+- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry - CVE-2025-38472
+
 * Tue Aug 26 2025 Alex Burmashev <alexander.burmashev@oracle.com> [6.12.0-55.29.1.el10_0]
 - Bump internal version to 55.29.1
 - ice: fix eswitch code memory leak in reset scenario - CVE-2025-38417
diff --git a/sources b/sources
index 6275ba972..a82138b73 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
 SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e
-SHA512 (kernel-abi-stablelists-6.12.0-55.29.1.el10_0.tar.xz) = 6fee4a7489cd6ee6048a2299bb42052b0dad0f40d9edd6f9412286728ddc25e5fd491605c7f176284cce339660d0d2585c02e20b3460ebdef08152a70cb81c33
-SHA512 (kernel-kabi-dw-6.12.0-55.29.1.el10_0.tar.xz) = 95e56376dcb6f68300626e83bc60ca36443866f04e600f0a3eeb459435ee1f1cc3287d578209d5c1522fa0cc3e5a0c7999d573e46c9070bc0001e49c9fb8f9aa
-SHA512 (linux-6.12.0-55.29.1.el10_0.tar.xz) = 890d427ff5201b4aef650ea10c74d2478458be84af4d88996b4b1b61c310bba0b2daa57e43501a1aa16b5a1d38e491c90389b72e87dfd452b0f2d1d8e3ab22a5
+SHA512 (kernel-abi-stablelists-6.12.0-55.30.1.el10_0.tar.xz) = 6fee4a7489cd6ee6048a2299bb42052b0dad0f40d9edd6f9412286728ddc25e5fd491605c7f176284cce339660d0d2585c02e20b3460ebdef08152a70cb81c33
+SHA512 (kernel-kabi-dw-6.12.0-55.30.1.el10_0.tar.xz) = 95e56376dcb6f68300626e83bc60ca36443866f04e600f0a3eeb459435ee1f1cc3287d578209d5c1522fa0cc3e5a0c7999d573e46c9070bc0001e49c9fb8f9aa
+SHA512 (linux-6.12.0-55.30.1.el10_0.tar.xz) = 230318d76634fb512e4f020b870b19659e5b564e920db161acaece9add99c8b90dceb7838fe968c731d6774fbd7dd3acff9ffafdc52e0e224c2b81ac64b2e7ed
 SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe
 SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3
 SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c