diff --git a/Makefile.rhelver b/Makefile.rhelver
index 37314ea36..e5ba1ba7c 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 154
+RHEL_RELEASE = 155
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel.changelog b/kernel.changelog
index 1e2e94fb9..cd0656871 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,21 @@
+* Tue Nov 11 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-155.el10]
+- bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek) [RHEL-108805]
+- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-124143]
+- of: reserved_mem: Add missing IORESOURCE_MEM flag on resources (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Restructure call site for dma_contiguous_early_fixup() (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Add functions to parse "memory-region" (Maxime Ripard) [RHEL-125402]
+- Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Warn for missing static reserved memory regions (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Move an assignment to effective place in __reserved_mem_alloc_size() (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Do not make kmemleak ignore freed address (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Maxime Ripard) [RHEL-125402]
+- dma-mapping: save base/size instead of pointer to shared DMA pool (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Add code to dynamically allocate reserved_mem array (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Restructure how the reserved memory regions are processed (Maxime Ripard) [RHEL-125402]
+- redhat: add all namespace-dependent selftests to kernel-selftests-internal (Joel Savitz) [RHEL-122506]
+- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124977] {CVE-2025-40047}
+Resolves: RHEL-108805, RHEL-122506, RHEL-124143, RHEL-124977, RHEL-125402
+
 * Mon Nov 10 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-154.el10]
 - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124196]
 - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101959]
diff --git a/kernel.spec b/kernel.spec
index 7224d095d..f3c84436a 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 154
+%define pkgrelease 155
 %define kversion 6
-%define tarfile_release 6.12.0-154.el10
+%define tarfile_release 6.12.0-155.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 154%{?buildid}%{?dist}
+%define specrelease 155%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-154.el10
+%define kabiversion 6.12.0-155.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -3256,7 +3256,7 @@ pushd tools/testing/selftests
 export CFLAGS="%{build_cflags}"
 export CXXFLAGS="%{build_cxxflags}"
 
-TARGETS="bpf cgroup kmod mm net net/forwarding net/mptcp net/netfilter net/packetdrill tc-testing memfd drivers/net/hw iommu cachestat pid_namespace rlimits timens pidfd"
+TARGETS="bpf cgroup kmod mm net net/forwarding net/mptcp net/netfilter net/packetdrill tc-testing memfd drivers/net/hw iommu cachestat pid_namespace rlimits timens pidfd capabilities clone3 exec filesystems firmware landlock mount mount_setattr move_mount_set_group nsfs openat2 proc safesetid seccomp tmpfs uevent vDSO"
 %{make} %{?_smp_mflags} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" EXTRA_LDFLAGS="%{__global_ldflags}" ARCH=$Arch V=1 TARGETS="$TARGETS" SKIP_TARGETS="" $force_targets VMLINUX_H="${RPM_VMLINUX_H}"
 
 # Restore the original level of source fortification
@@ -3704,6 +3704,108 @@ find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/pidfd/{} \;
 find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/pidfd/{} \;
 find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/pidfd/{} \;
 popd
+# install capabilities selftests
+pushd tools/testing/selftests/capabilities
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/capabilities/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/capabilities/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/capabilities/{} \;
+popd
+# install clone3 selftests
+pushd tools/testing/selftests/clone3
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/clone3/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/clone3/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/clone3/{} \;
+popd
+# install exec selftests
+pushd tools/testing/selftests/exec
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/exec/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/exec/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/exec/{} \;
+popd
+# install filesystems selftests
+pushd tools/testing/selftests/filesystems
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/filesystems/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/filesystems/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/filesystems/{} \;
+popd
+# install firmware selftests
+pushd tools/testing/selftests/firmware
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/firmware/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/firmware/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/firmware/{} \;
+popd
+# install landlock selftests
+pushd tools/testing/selftests/landlock
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/landlock/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/landlock/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/landlock/{} \;
+popd
+# install mount selftests
+pushd tools/testing/selftests/mount
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/mount/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/mount/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/mount/{} \;
+popd
+# install mount_setattr selftests
+pushd tools/testing/selftests/mount_setattr
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/mount_setattr/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/mount_setattr/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/mount_setattr/{} \;
+popd
+# install move_mount_set_group selftests
+pushd tools/testing/selftests/move_mount_set_group
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/move_mount_set_group/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/move_mount_set_group/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/move_mount_set_group/{} \;
+popd
+# install nsfs selftests
+pushd tools/testing/selftests/nsfs
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/nsfs/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/nsfs/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/nsfs/{} \;
+popd
+# install openat2 selftests
+pushd tools/testing/selftests/openat2
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/openat2/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/openat2/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/openat2/{} \;
+popd
+# install proc selftests
+pushd tools/testing/selftests/proc
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/proc/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/proc/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/proc/{} \;
+popd
+# install safesetid selftests
+pushd tools/testing/selftests/safesetid
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/safesetid/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/safesetid/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/safesetid/{} \;
+popd
+# install seccomp selftests
+pushd tools/testing/selftests/seccomp
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/seccomp/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/seccomp/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/seccomp/{} \;
+popd
+# install tmpfs selftests
+pushd tools/testing/selftests/tmpfs
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/tmpfs/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/tmpfs/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/tmpfs/{} \;
+popd
+# install uevent selftests
+pushd tools/testing/selftests/uevent
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/uevent/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/uevent/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/uevent/{} \;
+popd
+# install vDSO selftests
+pushd tools/testing/selftests/vDSO
+find -type d -exec install -d %{buildroot}%{_libexecdir}/kselftests/vDSO/{} \;
+find -type f -executable -exec install -D -m755 {} %{buildroot}%{_libexecdir}/kselftests/vDSO/{} \;
+find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/kselftests/vDSO/{} \;
+popd
 %endif
 
 ###
@@ -4365,6 +4467,23 @@ fi\
 #
 #
 %changelog
+* Tue Nov 11 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-155.el10]
+- bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek) [RHEL-108805]
+- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-124143]
+- of: reserved_mem: Add missing IORESOURCE_MEM flag on resources (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Restructure call site for dma_contiguous_early_fixup() (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Add functions to parse "memory-region" (Maxime Ripard) [RHEL-125402]
+- Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Warn for missing static reserved memory regions (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Move an assignment to effective place in __reserved_mem_alloc_size() (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Do not make kmemleak ignore freed address (Maxime Ripard) [RHEL-125402]
+- of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Maxime Ripard) [RHEL-125402]
+- dma-mapping: save base/size instead of pointer to shared DMA pool (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Add code to dynamically allocate reserved_mem array (Maxime Ripard) [RHEL-125402]
+- of: reserved_mem: Restructure how the reserved memory regions are processed (Maxime Ripard) [RHEL-125402]
+- redhat: add all namespace-dependent selftests to kernel-selftests-internal (Joel Savitz) [RHEL-122506]
+- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124977] {CVE-2025-40047}
+
 * Mon Nov 10 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-154.el10]
 - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124196]
 - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101959]
diff --git a/sources b/sources
index a4cd7a37d..5a9d81e7d 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-154.el10.tar.xz) = 930d333efadbf6a9ac372743f1548952c3193dfc7483b0f607b27b14afa69fb9fc57ce7dfa6b3903c8070fdd1b68fb81cf88fd26a5a6c47c9904dcac6ebab2e7
-SHA512 (kernel-abi-stablelists-6.12.0-154.el10.tar.xz) = 551d24e1ea486ae9a6da72f1b424e5e85c79404f2ab02ce669a825bc359509f11aa9343c7ddfcc7fe785944a0c946344d1cef95973f26fcfd514f67121df7730
-SHA512 (kernel-kabi-dw-6.12.0-154.el10.tar.xz) = fa96126eeaec9c932c7f574ca6f10834349c09e809a1e157c6fa06cb9c3851eab9cb3667f09a2898972519ab4cf8177d04ef2f1700597032d89c7035274233c1
+SHA512 (linux-6.12.0-155.el10.tar.xz) = a750e5fa0467a8b20402c552aba0688b68b4df14271decbf215d60f79a44f0f067a3b465958cdfa65bbe60ee532acf108ca608f644e3c41971281b64657660c5
+SHA512 (kernel-abi-stablelists-6.12.0-155.el10.tar.xz) = 5074d63a2bda9798058b83d4aaeeb6086922d8c6a0571262436dde8587aa629a96920a6d83703ac3f2237713dd64313824d0f79114fa9140f89bfd4844afabb9
+SHA512 (kernel-kabi-dw-6.12.0-155.el10.tar.xz) = 1c83e058e4aad401e229b52ee801e2411e2569218faf8652d2e575f60f3941c65e7b4639a2996e1056bf098ebed3ab59aa624bc87660f0554f79fbb9e8ed93d4