diff --git a/Makefile.rhelver b/Makefile.rhelver
index 36b6f2d1a..5c632f7a0 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 8
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 642
+RHEL_RELEASE = 643
 
 #
 # ZSTREAM
diff --git a/kernel.changelog b/kernel.changelog
index 26db3705b..d34dd7ca5 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,13 @@
+* Sat Nov 22 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-643.el9]
+- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-129168]
+- scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129201]
+- x86/topology: Implement topology_is_core_online() to address SMT regression (David Arcari) [RHEL-125289]
+- tools/power turbostat: Fix incorrect sorting of PMT telemetry (David Arcari) [RHEL-127415]
+- dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Prarit Bhargava) [RHEL-128293]
+- net/mlx5: fs, fix UAF in flow counter release (CKI Backport Bot) [RHEL-124427] {CVE-2025-39979}
+- uprobes: Fix race in uprobe_free_utask (Viktor Malik) [RHEL-120479]
+Resolves: RHEL-120479, RHEL-124427, RHEL-125289, RHEL-127415, RHEL-128293, RHEL-129168, RHEL-129201
+
 * Thu Nov 20 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-642.el9]
 - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122981]
 - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-122981]
diff --git a/kernel.spec b/kernel.spec
index 6a9e78b4c..26bdb6585 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 642
+%define pkgrelease 643
 %define kversion 5
-%define tarfile_release 5.14.0-642.el9
+%define tarfile_release 5.14.0-643.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 642%{?buildid}%{?dist}
+%define specrelease 643%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-642.el9
+%define kabiversion 5.14.0-643.el9
 
 #
 # End of genspec.sh variables
@@ -3693,6 +3693,15 @@ fi
 #
 #
 %changelog
+* Sat Nov 22 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-643.el9]
+- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-129168]
+- scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129201]
+- x86/topology: Implement topology_is_core_online() to address SMT regression (David Arcari) [RHEL-125289]
+- tools/power turbostat: Fix incorrect sorting of PMT telemetry (David Arcari) [RHEL-127415]
+- dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Prarit Bhargava) [RHEL-128293]
+- net/mlx5: fs, fix UAF in flow counter release (CKI Backport Bot) [RHEL-124427] {CVE-2025-39979}
+- uprobes: Fix race in uprobe_free_utask (Viktor Malik) [RHEL-120479]
+
 * Thu Nov 20 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-642.el9]
 - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122981]
 - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-122981]
diff --git a/sources b/sources
index f1d231e97..98d7d9f38 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-642.el9.tar.xz) = 3788732c7a85b48c941993d6fd033877b083831491cc808c8cc869c78becc2c32f5ccf4a29848cd631e8445b64a09662334d7be2e56add00b6a6d35f042d8fac
-SHA512 (kernel-abi-stablelists-5.14.0-642.el9.tar.bz2) = 9656ff359dd7d3bd4d4f3564a5427cb10cab055937ceee14a83e29004de76800e5a80d1725e07d17b6d11330577cf9bc78153598fc3b7aecb4407f17a70b7057
-SHA512 (kernel-kabi-dw-5.14.0-642.el9.tar.bz2) = a9beea80cc98062085c19f6a94d79aed1afaab7b668ed74150ba123a07200bae81f3854ba4d533b5ec38956ef19c206286a8f6b359294d3ed7dd44b35653f46f
+SHA512 (linux-5.14.0-643.el9.tar.xz) = ffd1ba10a243dc7a768f3657660f7af830c1a12e0d327413466ab05d50fa0cc3318415e1a83eff90696e28bacc762a2c281f4c0376f6f9aca36c0113c6392eca
+SHA512 (kernel-abi-stablelists-5.14.0-643.el9.tar.bz2) = 140ac33814a5649abec42659bfb2bdf6aa1d6432c135b90d407bfd518dc688faba18820c9a06e0284394a63417fdf4c5dfad140986a905e856c83375d4060af5
+SHA512 (kernel-kabi-dw-5.14.0-643.el9.tar.bz2) = d8c532f4164fdbf12472e5a604375e52ca63d4eaf2eea9d151f3555fde5b445ada28325f6da712cbedca5ca8a99c20c8f789415e4239d5d78df7278c36e19ae8