diff --git a/Makefile.rhelver b/Makefile.rhelver
index daac09745..37ead265e 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 0
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 45
+RHEL_RELEASE = 46
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 58993a768..6ea81f911 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -4574,6 +4574,7 @@ CONFIG_PKEY_CCA=m
 CONFIG_PKEY_EP11=m
 CONFIG_PKEY=m
 CONFIG_PKEY_PCKMO=m
+CONFIG_PKEY_UV=m
 # CONFIG_PL320_MBOX is not set
 # CONFIG_PLATFORM_MHU is not set
 CONFIG_PLAYSTATION_FF=y
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index dc2eaed8a..7873a040c 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -4553,6 +4553,7 @@ CONFIG_PKEY_CCA=m
 CONFIG_PKEY_EP11=m
 CONFIG_PKEY=m
 CONFIG_PKEY_PCKMO=m
+CONFIG_PKEY_UV=m
 # CONFIG_PL320_MBOX is not set
 # CONFIG_PLATFORM_MHU is not set
 CONFIG_PLAYSTATION_FF=y
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 2bc9d93fe..309a7dd96 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -4563,6 +4563,7 @@ CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
 CONFIG_PKEY_CCA=m
 CONFIG_PKEY_EP11=m
 CONFIG_PKEY_PCKMO=y
+CONFIG_PKEY_UV=m
 CONFIG_PKEY=y
 # CONFIG_PL320_MBOX is not set
 # CONFIG_PLATFORM_MHU is not set
diff --git a/kernel.changelog b/kernel.changelog
index 5a18c7896..11f71885e 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,36 @@
+* Mon Jan 27 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-46.el10]
+- redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-74748]
+- xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64936]
+- redhat: create 'debug' addon for UKI (Li Tian) [RHEL-70836]
+- mptcp: disable by default (Davide Caratti) [RHEL-74247]
+- initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-73366] {CVE-2024-53142}
+- redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-24135]
+- s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-24136]
+- s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-24136]
+- s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-24136]
+- s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-24136]
+- s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-24136]
+- s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-24136]
+- s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-24136]
+- s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-24135]
+- s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-24135]
+- s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-24135]
+- s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-24135]
+- s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-24135]
+- s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-24135]
+- ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-68933]
+- PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76026]
+- xfrm: mark packet offload as tech preview (Sabrina Dubroca) [RHEL-75472]
+- mm/kmemleak: fix sleeping function called from invalid context at print message (CKI Backport Bot) [RHEL-74104] {CVE-2024-57885}
+- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74099] {CVE-2024-57884}
+- bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-73718]
+- selftests: drv-net: rss_ctx: Add test for ntuple rule (Michal Schmidt) [RHEL-73718]
+- bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-73718]
+Resolves: RHEL-24135, RHEL-24136, RHEL-64936, RHEL-68933, RHEL-70836, RHEL-73366, RHEL-73718, RHEL-74099, RHEL-74104, RHEL-74247, RHEL-74748, RHEL-75472, RHEL-76026
+
 * Fri Jan 24 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-45.el10]
 - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-73620]
 - netfilter: nf_tables: imbalance in flowtable binding (CKI Backport Bot) [RHEL-73620]
diff --git a/kernel.spec b/kernel.spec
index 92c55d60c..6a6f887da 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 45
+%define pkgrelease 46
 %define kversion 6
-%define tarfile_release 6.12.0-45.el10
+%define tarfile_release 6.12.0-46.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 45%{?buildid}%{?dist}
+%define specrelease 46%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-45.el10
+%define kabiversion 6.12.0-46.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4196,6 +4196,38 @@ fi\
 #
 #
 %changelog
+* Mon Jan 27 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-46.el10]
+- redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-74748]
+- xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64936]
+- redhat: create 'debug' addon for UKI (Li Tian) [RHEL-70836]
+- mptcp: disable by default (Davide Caratti) [RHEL-74247]
+- initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-73366] {CVE-2024-53142}
+- redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-24135]
+- s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-24136]
+- s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-24136]
+- s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-24136]
+- s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-24136]
+- s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-24136]
+- s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-24136]
+- s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-24136]
+- s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-24135]
+- s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-24135]
+- s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-24135]
+- s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-24135]
+- s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-24135]
+- s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-24135]
+- ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-68933]
+- PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76026]
+- xfrm: mark packet offload as tech preview (Sabrina Dubroca) [RHEL-75472]
+- mm/kmemleak: fix sleeping function called from invalid context at print message (CKI Backport Bot) [RHEL-74104] {CVE-2024-57885}
+- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74099] {CVE-2024-57884}
+- bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-73718]
+- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-73718]
+- selftests: drv-net: rss_ctx: Add test for ntuple rule (Michal Schmidt) [RHEL-73718]
+- bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-73718]
+
 * Fri Jan 24 2025 Jan Stancek <jstancek@redhat.com> [6.12.0-45.el10]
 - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-73620]
 - netfilter: nf_tables: imbalance in flowtable binding (CKI Backport Bot) [RHEL-73620]
diff --git a/sources b/sources
index e0671081e..76ae40a11 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-45.el10.tar.xz) = 660ba43490bfb370984e954cc14be4306c4f8ea0d70871d7b17fe6f69df18d670ae24787198dc154016d351b52d6d55c416efdf0696cb3e7747ca6c97018a7a6
-SHA512 (kernel-abi-stablelists-6.12.0-45.el10.tar.xz) = a8bbdbbe8dcf357312580b600ec061609711bc4c6e2fa99265155cd2111e4cd536df3c72be59c666ca45b44a94a70e39feb9d6c6a66ddf0397dc61fe68d495d5
-SHA512 (kernel-kabi-dw-6.12.0-45.el10.tar.xz) = 78e6feca901761dff396a9875c8f7d781c2624063c825c7e78481d941c0eec4ebeec8a37f09edf3060eb799a8bd1c222993d45815b5f81f1d129f6727eebf44e
+SHA512 (linux-6.12.0-46.el10.tar.xz) = df4546809fe94f92897585e1f2f0ed654352d0a91106965dcca4b360c9bb5d31b829386e0b6119af2d680b0dc2de2dfd4850b1e59c1385672e5ccf1eba163dce
+SHA512 (kernel-abi-stablelists-6.12.0-46.el10.tar.xz) = 852ba4fe15184ff4be465d07a005d15a4e577a03b3fed6d88d684e8996dd899ce2279e7dd8e3750c55f295734f3408eaa8e8441a19e80f51b11ee82cc713df42
+SHA512 (kernel-kabi-dw-6.12.0-46.el10.tar.xz) = 394165cba4e2d576c21708b70dcd01bf9ae38dd8101104ee468b29bcff00052a062c6808c9ce252769aa5402ad12cae7100d194a43cbb090e6020e043ed9f382
diff --git a/uki_addons.json b/uki_addons.json
index 8c2aebc64..f0741b11b 100644
--- a/uki_addons.json
+++ b/uki_addons.json
@@ -37,6 +37,9 @@
         ],
         "crashkernel-default.addon": [
             "crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M\n"
+        ],
+        "debug.addon": [
+            "debug"
         ]
     }
 }
\ No newline at end of file