diff --git a/Makefile.rhelver b/Makefile.rhelver
index ae722fbac..45fc5b579 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 207
+RHEL_RELEASE = 208
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 9f167aff5..05cc0658d 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -1019,6 +1019,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index e0d6a9e21..8a9f982a6 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -1019,6 +1019,7 @@ CONFIG_CRYPTO_DEV_OCTEONTX2_CPT=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 73e361fb8..39519261c 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -826,6 +826,7 @@ CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
 CONFIG_CRYPTO_DEV_VMX_ENCRYPT=m
 CONFIG_CRYPTO_DEV_VMX=y
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 0c6088ca0..15d454aac 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -826,6 +826,7 @@ CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
 CONFIG_CRYPTO_DEV_VMX_ENCRYPT=m
 CONFIG_CRYPTO_DEV_VMX=y
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index cbcff63c9..e2bc7cbf2 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -825,6 +825,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 3537ab139..e556f1fc4 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -825,6 +825,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 432466022..a660408ca 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -830,6 +830,7 @@ CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index fcc02997f..40bdb9a23 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -874,6 +874,7 @@ CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 1ad4eb37e..0a68f57ea 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -874,6 +874,7 @@ CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
 CONFIG_CRYPTO_DEV_SP_CCP=y
 CONFIG_CRYPTO_DEV_SP_PSP=y
 # CONFIG_CRYPTO_DEV_VIRTIO is not set
+CONFIG_CRYPTO_DH_RFC7919_GROUPS=y
 CONFIG_CRYPTO_DH=y
 CONFIG_CRYPTO_DRBG_CTR=y
 CONFIG_CRYPTO_DRBG_HASH=y
diff --git a/kernel.spec b/kernel.spec
index 9a9003703..a9960c1c0 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -119,15 +119,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 207
+%define pkgrelease 208
 %define kversion 5
-%define tarfile_release 5.14.0-207.el9
+%define tarfile_release 5.14.0-208.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 207%{?buildid}%{?dist}
+%define specrelease 208%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-207.el9
+%define kabiversion 5.14.0-208.el9
 
 #
 # End of genspec.sh variables
@@ -3106,6 +3106,34 @@ fi
 #
 #
 %changelog
+* Wed Dec 07 2022 Herton R. Krzesinski <herton@redhat.com> [5.14.0-208.el9]
+- selftests/livepatch: better synchronize test_klp_callbacks_busy (Julia Denham) [2121205]
+- livepatch: Reorder to use before freeing a pointer (Julia Denham) [2121205]
+- livepatch: Skip livepatch tests if ftrace cannot be configured (Julia Denham) [2121205]
+- livepatch: Don't block removal of patches that are safe to unload (Julia Denham) [2121205]
+- enable CONFIG_CRYPTO_DH_RFC7919_GROUPS (Chris Leech) [2143836]
+- crypto: add __init/__exit annotations to init/exit funcs (Chris Leech) [2143836]
+- crypto: dh - Remove the unused function dh_safe_prime_dh_alg() (Chris Leech) [2143836]
+- crypto: dh - calculate Q from P for the full public key verification (Chris Leech) [2143836]
+- crypto: dh - allow for passing NULL to the ffdheXYZ(dh)s' ->set_secret() (Chris Leech) [2143836]
+- crypto: testmgr - add keygen tests for ffdheXYZ(dh) templates (Chris Leech) [2143836]
+- crypto: dh - implement private key generation primitive for ffdheXYZ(dh) (Chris Leech) [2143836]
+- crypto: testmgr - add known answer tests for ffdheXYZ(dh) templates (Chris Leech) [2143836]
+- crypto: dh - implement ffdheXYZ(dh) templates (Chris Leech) [2143836]
+- crypto: dh - introduce common code for built-in safe-prime group support (Chris Leech) [2143836]
+- crypto: dh - split out deserialization code from crypto_dh_decode() (Chris Leech) [2143836]
+- crypto: dh - remove struct dh's ->q member (Chris Leech) [2143836]
+- crypto: kpp - provide support for KPP spawns (Chris Leech) [2143836]
+- crypto: kpp - provide support for KPP template instances (Chris Leech) [2143836]
+- scsi: storvsc: remove an extraneous "to" in a comment (Cathy Avery) [2143335]
+- Drivers: hv: vmbus: Optimize vmbus_on_event (Cathy Avery) [2143335]
+- scsi: storvsc: Drop DID_TARGET_FAILURE use (Cathy Avery) [2143335]
+- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Cathy Avery) [2143335]
+- scsi: storvsc: Correct reporting of Hyper-V I/O size limits (Cathy Avery) [2143335]
+- scsi: storvsc: Removing Pre Win8 related logic (Cathy Avery) [2143335]
+- scsi: storvsc: Fix typo in comment (Cathy Avery) [2143335]
+- scsi: storvsc: Remove support for Hyper-V 2008 and 2008R2/Win7 (Cathy Avery) [2143335]
+
 * Tue Dec 06 2022 Frantisek Hrbata <fhrbata@redhat.com> [5.14.0-207.el9]
 - HID: intel-ish-hid: ipc: Add Meteor Lake PCI device ID (Tony Camuso) [2131760]
 - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Tony Camuso) [2131760]
diff --git a/sources b/sources
index e1c22ea37..ebb0bce4a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-207.el9.tar.xz) = 88dbbb56f6f9dfb5acb596da502ccda0c7241718a6e430c355b1f61f8cb8d771bf15e0dd6661f388e01f24fe15b34097857489527f7739dec3857ecd152d00c0
-SHA512 (kernel-abi-stablelists-5.14.0-207.el9.tar.bz2) = da6fe5c71d567d7d79bb1e928812072d6d83808b024772c10ee5f924febd8fa041ac384a37dd09c170bdeaeaad61797b0ef95271ae27982de6ae4a9367d84f1d
-SHA512 (kernel-kabi-dw-5.14.0-207.el9.tar.bz2) = 3aff600593afa35e89015dec9a1391df3f6126d9f2d1c5daa15db2745d053aec470dab2772559e73b07c21af77c0f43ec560529a2e65086d7d9c0ff7dddf4c5b
+SHA512 (linux-5.14.0-208.el9.tar.xz) = b17ae7ac5e7ac06a65faab281de190293c5a4ebacd026c2d28db21a0b9337e8c5334aee011425a73a59658c0e2292a64e2d9473f2eb9e1d20ece1831961fa9f9
+SHA512 (kernel-abi-stablelists-5.14.0-208.el9.tar.bz2) = efb2b30f1a3ab8af32195107cb0a103ed9b776b035d4bda7651cd96c715ffebc0601642291c644f233862d34b54b8dbc4bf5ea67c3e7efef0d7468b747497e78
+SHA512 (kernel-kabi-dw-5.14.0-208.el9.tar.bz2) = 3a591448bd5f43379a98c6429bd08d0a774269343c9164020ae01944120736ce956cfd681fc75b879363cdaec05f72db915231022932187bb81c584efdc5b9f1