diff --git a/Makefile.rhelver b/Makefile.rhelver
index 13df287ee..480b47619 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 6
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 543
+RHEL_RELEASE = 544
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index cff32bdef..217b55236 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -6864,7 +6864,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 52726f791..7eae63a46 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -6840,7 +6840,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index c1aefa7e0..92478bc0f 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -6862,7 +6862,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 867860929..ec0c6d0b2 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -6838,7 +6838,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index b2adc4075..1b1b04c76 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -6969,7 +6969,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 7d6dd6b1c..4033ac58a 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -6945,7 +6945,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index c70acac52..41f7d9d73 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -6265,7 +6265,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 0bf365c9a..c491a2eb9 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -6243,7 +6243,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index d9b64b710..e1d38ef06 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -6261,7 +6261,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index c472623d3..a749f46c9 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -6239,7 +6239,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 26bee198f..eac4b5790 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -6265,7 +6265,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index bb5bd2844..36569f430 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -6536,7 +6536,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index b71176599..66149b505 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -6513,7 +6513,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 11e86016a..11da93ce1 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -6640,7 +6640,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 351911a37..43d99321d 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -6617,7 +6617,7 @@ CONFIG_USB_SERIAL_UPD78F0730=m
 CONFIG_USB_SERIAL_VISOR=m
 CONFIG_USB_SERIAL_WHITEHEAT=m
 # CONFIG_USB_SERIAL_WISHBONE is not set
-# CONFIG_USB_SERIAL_XR is not set
+CONFIG_USB_SERIAL_XR=m
 CONFIG_USB_SERIAL_XSENS_MT=m
 CONFIG_USB_SERIAL=y
 CONFIG_USB_SEVSEG=m
diff --git a/kernel.changelog b/kernel.changelog
index 309c105fa..1440104ca 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,18 @@
+* Fri Dec 13 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-544.el9]
+- x86/apic: Always explicitly disarm TSC-deadline timer (David Arcari) [RHEL-65750]
+- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-35819]
+- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-69670] {CVE-2024-53122}
+- x86/tdx: mark TDX guest as fully supported (Vitaly Kuznetsov) [RHEL-70465]
+- net: usb: cdc_ether: don't spew notifications (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- USB: zaurus: Add ID for A-300/B-500/C-700 (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- net: usb: cdc_ether: add u-blox 0x1313 composition. (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- USB: serial: xr: add TIOCGRS485 and TIOCSRS485 ioctls (Desnes Nunes) [RHEL-67057]
+- USB: serial: xr: avoid requesting zero DTE rate (Desnes Nunes) [RHEL-67057]
+- redhat: configs: enable xr_serial on rhel (Desnes Nunes) [RHEL-67057]
+- smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-68558] {CVE-2024-53095}
+- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-67852]
+Resolves: RHEL-35819, RHEL-52777, RHEL-65750, RHEL-67057, RHEL-67852, RHEL-68558, RHEL-69670, RHEL-70465
+
 * Thu Dec 12 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-543.el9]
 - scsi: lpfc: Fix a possible null pointer dereference (Ewan D. Milne) [RHEL-64869] {CVE-2024-43821}
 - smb: client: fix NULL ptr deref in crypto_aead_setkey() (Paulo Alcantara) [RHEL-63909]
diff --git a/kernel.spec b/kernel.spec
index 5c41a203d..befba4288 100755
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 543
+%define pkgrelease 544
 %define kversion 5
-%define tarfile_release 5.14.0-543.el9
+%define tarfile_release 5.14.0-544.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 543%{?buildid}%{?dist}
+%define specrelease 544%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-543.el9
+%define kabiversion 5.14.0-544.el9
 
 #
 # End of genspec.sh variables
@@ -3812,6 +3812,20 @@ fi
 #
 #
 %changelog
+* Fri Dec 13 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-544.el9]
+- x86/apic: Always explicitly disarm TSC-deadline timer (David Arcari) [RHEL-65750]
+- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-35819]
+- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-69670] {CVE-2024-53122}
+- x86/tdx: mark TDX guest as fully supported (Vitaly Kuznetsov) [RHEL-70465]
+- net: usb: cdc_ether: don't spew notifications (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- USB: zaurus: Add ID for A-300/B-500/C-700 (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- net: usb: cdc_ether: add u-blox 0x1313 composition. (Jose Ignacio Tornos Martinez) [RHEL-52777]
+- USB: serial: xr: add TIOCGRS485 and TIOCSRS485 ioctls (Desnes Nunes) [RHEL-67057]
+- USB: serial: xr: avoid requesting zero DTE rate (Desnes Nunes) [RHEL-67057]
+- redhat: configs: enable xr_serial on rhel (Desnes Nunes) [RHEL-67057]
+- smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-68558] {CVE-2024-53095}
+- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-67852]
+
 * Thu Dec 12 2024 Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-543.el9]
 - scsi: lpfc: Fix a possible null pointer dereference (Ewan D. Milne) [RHEL-64869] {CVE-2024-43821}
 - smb: client: fix NULL ptr deref in crypto_aead_setkey() (Paulo Alcantara) [RHEL-63909]
diff --git a/sources b/sources
index f00b8eebf..777a90374 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-543.el9.tar.xz) = 9abc879c171083cfbf1c8bd21559d66ed2f4a42074d78ff356b2f0737b5b03f03537d73c90597c48dfbed8637e08045fa94bdb4a07d55c049425ca5e597ddc7a
-SHA512 (kernel-abi-stablelists-5.14.0-543.el9.tar.bz2) = 4320c3ff1f2aa8bcb34b9f0bcf5e6107d10144190d79571d8c9b46c770dd0f1b2f60d57de990a5b36cf883870bf107dd8ed8f9e94c99a10a0a18d9db0df118a0
-SHA512 (kernel-kabi-dw-5.14.0-543.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb
+SHA512 (linux-5.14.0-544.el9.tar.xz) = af4ab414c1f39476aed3e46ecab93ca597dfaa3063094865671bc3a60d688288a713b20d65a995ba89a22abc7ab3cc57eb0c80e4061e0efa249524a42a18676a
+SHA512 (kernel-abi-stablelists-5.14.0-544.el9.tar.bz2) = 7eb35898316204c41611c1bda72dab465ef8aa5603cc5674cb8c672889067d4b6cee8046047183ced435043870846098a7d38ab9cd91898baf77cde79855b1da
+SHA512 (kernel-kabi-dw-5.14.0-544.el9.tar.bz2) = 3d08f838767b27b87724fed347ce3be63fce15e5eded0576121c474d14db4a6d07895b350c635e343d5522ac237dfd982d1f39b8480c4129f4eb79f6a64115cb