diff --git a/.gitignore b/.gitignore
index 8a8fa791f..9b3a4754f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,7 +1,7 @@
 fedoraimaca.x509
-kernel-abi-stablelists-6.12.0-55.38.1.el10_0.tar.xz
-kernel-kabi-dw-6.12.0-55.38.1.el10_0.tar.xz
-linux-6.12.0-55.38.1.el10_0.tar.xz
+kernel-abi-stablelists-6.12.0-55.39.1.el10_0.tar.xz
+kernel-kabi-dw-6.12.0-55.39.1.el10_0.tar.xz
+linux-6.12.0-55.39.1.el10_0.tar.xz
 nvidiagpuoot001.x509
 olima1.x509
 olimaca1.x509
diff --git a/Makefile.rhelver b/Makefile.rhelver
index 4b63c691e..87272681c 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 55.38.1
+RHEL_RELEASE = 55.39.1
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel.changelog b/kernel.changelog
index 8d5a3c3ec..b5dbc5a8b 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,14 @@
+* Sat Oct 04 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.39.1.el10_0]
+- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
+- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
+- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
+- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
+- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]
+Resolves: RHEL-107595, RHEL-111037, RHEL-114695, RHEL-114712
+
 * Tue Sep 30 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.38.1.el10_0]
 - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
 - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
diff --git a/kernel.spec b/kernel.spec
index 856de67d4..7457574b9 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 55.38.1
+%define pkgrelease 55.39.1
 %define kversion 6
-%define tarfile_release 6.12.0-55.38.1.el10_0
+%define tarfile_release 6.12.0-55.39.1.el10_0
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 55.38.1%{?buildid}%{?dist}
+%define specrelease 55.39.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-55.38.1.el10_0
+%define kabiversion 6.12.0-55.39.1.el10_0
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4361,7 +4361,7 @@ fi\
 #
 #
 %changelog
-* Wed Oct 08 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-55.38.1
+* Wed Oct 15 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-55.39.1
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4372,10 +4372,20 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Wed Oct 08 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.38.1
+* Wed Oct 15 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-55.39.1
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 
+* Sat Oct 04 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.39.1.el10_0]
+- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
+- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
+- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
+- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
+- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
+- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]
+
 * Tue Sep 30 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-55.38.1.el10_0]
 - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
 - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
diff --git a/sources b/sources
index 5bdf9a1fd..e622eeb6b 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
 SHA512 (fedoraimaca.x509) = e04809394f4472c17e86d7024dee34f03fb68e82a85502fd5b00535202c72e57626a8376b2cf991b7e1e46404aa5ab8d189ebf320e0dd37d49e7efbc925c7a2e
-SHA512 (kernel-abi-stablelists-6.12.0-55.38.1.el10_0.tar.xz) = 0bb942deb31811aa507e57c8a3b59e0a3f3155065ceb556dd5d669d4cdccad15de847f146148bcbab1177ddd9dc53aebfbc312c8f3e12c37492073c4c9029254
-SHA512 (kernel-kabi-dw-6.12.0-55.38.1.el10_0.tar.xz) = f0421c45eef03b4ada447fb0bcc8ad994bf75ec01bf03816675fa01e71f32566aaaa4053a74dfe387df86a8ad0954717bbdea90e7ae31c345e44c4e3a00c5224
-SHA512 (linux-6.12.0-55.38.1.el10_0.tar.xz) = 2115832b9106082ee500163f223d32165132ece86266f20ceef01e3acf53a51694d34f71803bd7f99de6c0ba3c66688c45fabc74e8aa1dff16370ab25e1d3c72
+SHA512 (kernel-abi-stablelists-6.12.0-55.39.1.el10_0.tar.xz) = d494cde20c86e6fcd6e6c5b8abba425ed463d51478afd95defef128220e7c6909723f42949841d8ce62c88cfae27bcb753f833a0701407fd0baf321186eca4e5
+SHA512 (kernel-kabi-dw-6.12.0-55.39.1.el10_0.tar.xz) = ae12a2f15f0f025f7601c44b4b0beb1176243aa32ccd96ccbcb5f56c7af18e659fae238d9b4e300a769d71de37e1794c03e19b2d3e10bc107d0f62b30af1293f
+SHA512 (linux-6.12.0-55.39.1.el10_0.tar.xz) = 833cbec0d6bd205c7677bf0da6af03c9548cb3a842697b63c0fde8fb523b9f07707bd144ae43479d399b97a21ec8b81eaf64f9ee4cea35693a66bb05d65b266b
 SHA512 (nvidiagpuoot001.x509) = b42f836e1cfa07890cb6ca13de9c3950e306c9ec7686c4c09f050bb68869f5d82962b2cd5f3aa0eb7a0f3a3ae54e9c480eafbac5df53aa92c295ff511a8c59fe
 SHA512 (olima1.x509) = 123c26c1d698cc8523845c6e1103b9c72abf855acd225d37baf1f3388a47f912166d6d786fb367fe46de39e011b586ad7f3963aa2e8923da30a6ea9ae0d76ad3
 SHA512 (olimaca1.x509) = 3a779415fad29d6f7250ec97ab1f0a5eb62c351b724feee06b22e17f065bf74a558f32cc524d3222c4485635ae5b9cd5287855c94010fe743b51a4d954340c4c