diff --git a/Makefile.rhelver b/Makefile.rhelver
index 4dde5c995..0fcd933d8 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 9
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 728
+RHEL_RELEASE = 729
 
 #
 # ZSTREAM
diff --git a/kernel.changelog b/kernel.changelog
index ced29ee5c..180f1a843 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,19 @@
+* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
+- ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
+- selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
+- Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
+- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
+- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
+- icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
+- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
+- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
+- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
+- ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
+- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
+- arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
+- ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]
+Resolves: RHEL-152680, RHEL-185518, RHEL-189963, RHEL-210856, RHEL-211104
+
 * Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
 - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
 - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
diff --git a/kernel.spec b/kernel.spec
index bd0d8ec29..523230e18 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 728
+%define pkgrelease 729
 %define kversion 5
-%define tarfile_release 5.14.0-728.el9
+%define tarfile_release 5.14.0-729.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 728%{?buildid}%{?dist}
+%define specrelease 729%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-728.el9
+%define kabiversion 5.14.0-729.el9
 
 #
 # End of genspec.sh variables
@@ -3753,6 +3753,21 @@ fi
 #
 #
 %changelog
+* Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-729.el9]
+- ppc/fadump: invoke kmsg_dump in fadump panic path (Mamatha Inamdar) [RHEL-211104]
+- selinux: fix incorrect execmem checks on overlayfs (Ondrej Mosnacek) [RHEL-210856]
+- Revert "selinux: RHEL-only hotfix for execmem regression" (Ondrej Mosnacek) [RHEL-210856]
+- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189963] {CVE-2026-23002}
+- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-185518]
+- icmp: fix NULL pointer dereference in icmp_tag_validation() (Guillaume Nault) [RHEL-152680]
+- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry (Guillaume Nault) [RHEL-152680]
+- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Guillaume Nault) [RHEL-152680]
+- dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (Guillaume Nault) [RHEL-152680]
+- ipv4: Fix reference count leak when using error routes with nexthop objects (Guillaume Nault) [RHEL-152680]
+- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-152680]
+- arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-152680]
+- ipv4: icmp: convert to dev_net_rcu() (Guillaume Nault) [RHEL-152680]
+
 * Thu Jul 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-728.el9]
 - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193519] {CVE-2026-52973}
 - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190343] {CVE-2026-53281}
diff --git a/sources b/sources
index 2c2e66c62..ee1ebf05a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-728.el9.tar.xz) = e763d560a8822f5cd755d63271be49f2382fda14ce4e1f148f7e9d0e060a7fe19147c06e1a824864045fbba14a3b43daffe722253bc8b2ce9b6bd10ea0271490
-SHA512 (kernel-abi-stablelists-5.14.0-728.el9.tar.bz2) = bd42966bf269b77bd721159516ac7f97a058b291d775d75533a5412f8eae0aff727f2d187a3e7c3ec48e45f1763b91a972717152a9630c6568318eeef6015818
-SHA512 (kernel-kabi-dw-5.14.0-728.el9.tar.bz2) = d4029d7674ef2decef6d08bb6e09814464b33ffdc52f1cc8dbaeafbd2d83a16463feab06f677da9c059a4aeaa4ab035435dc9b51ea45a71bc3a89b690c5d0b42
+SHA512 (linux-5.14.0-729.el9.tar.xz) = 0071dafb43ffb5a7758c212f7ce412e96c351c511bb8e6d751dde0711091215ea125673c862e1942a8759ea35d629f728ed8b50389d7fc5e29f642643ccccdf4
+SHA512 (kernel-abi-stablelists-5.14.0-729.el9.tar.bz2) = 70e085aec4f1f6a9b7494db19c64d68f9948cda4bafc74a13548114268c9bf3a4f477b4e3b8c99d47b27d8d30c0bb951a756315ea33bcc562e84a478a78711a1
+SHA512 (kernel-kabi-dw-5.14.0-729.el9.tar.bz2) = 6bd1190f4ee7cfc31a37b6e048f5a0aada25ffb8031d4085aa15819ef4b738b13db4b70385b7ecf02deecefae18ea9a7f4a5340e0528fe58dc7e31562468d3b3