diff --git a/Makefile.rhelver b/Makefile.rhelver
index a7da62c00..07dc4b552 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 8
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 656
+RHEL_RELEASE = 657
 
 #
 # ZSTREAM
diff --git a/kernel.changelog b/kernel.changelog
index 5c049b5e7..d5465d5f2 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,16 @@
+* Thu Jan 08 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-657.el9]
+- powerpc/kexec: Enable SMT before waking offline CPUs (Mamatha Inamdar) [RHEL-137134]
+- dpll: zl3073x: Allow to configure phase offset averaging factor (CKI Backport Bot) [RHEL-118666]
+- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134429] {CVE-2025-40277}
+- PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (José Expósito) [RHEL-120786]
+- mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [RHEL-103900]
+- mlxbf-bootctl: Support sysfs entries for RTC battery status (David Thompson) [RHEL-103900]
+- platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (David Thompson) [RHEL-103900]
+- gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103874]
+- gpio: mlxbf3: Support shutdown() function (David Thompson) [RHEL-103874]
+- pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (David Thompson) [RHEL-104059]
+Resolves: RHEL-103874, RHEL-103900, RHEL-104059, RHEL-118666, RHEL-120786, RHEL-134429, RHEL-137134
+
 * Tue Jan 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-656.el9]
 - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-134978]
 - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (David Arcari) [RHEL-129399]
diff --git a/kernel.spec b/kernel.spec
index 4a859ba01..c865125f3 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 656
+%define pkgrelease 657
 %define kversion 5
-%define tarfile_release 5.14.0-656.el9
+%define tarfile_release 5.14.0-657.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 656%{?buildid}%{?dist}
+%define specrelease 657%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-656.el9
+%define kabiversion 5.14.0-657.el9
 
 #
 # End of genspec.sh variables
@@ -3697,6 +3697,18 @@ fi
 #
 #
 %changelog
+* Thu Jan 08 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-657.el9]
+- powerpc/kexec: Enable SMT before waking offline CPUs (Mamatha Inamdar) [RHEL-137134]
+- dpll: zl3073x: Allow to configure phase offset averaging factor (CKI Backport Bot) [RHEL-118666]
+- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134429] {CVE-2025-40277}
+- PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (José Expósito) [RHEL-120786]
+- mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [RHEL-103900]
+- mlxbf-bootctl: Support sysfs entries for RTC battery status (David Thompson) [RHEL-103900]
+- platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (David Thompson) [RHEL-103900]
+- gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103874]
+- gpio: mlxbf3: Support shutdown() function (David Thompson) [RHEL-103874]
+- pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (David Thompson) [RHEL-104059]
+
 * Tue Jan 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-656.el9]
 - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-134978]
 - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (David Arcari) [RHEL-129399]
diff --git a/sources b/sources
index afad12e1e..6e3b68ad5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-656.el9.tar.xz) = 78ced5b43b272e0b2c3411fb8362bb5fe914fc671d5d70fbc30a478699b4b73673ec74deff9427dcaf2f2cb1ae835ba6f8f90080dfdca3da25864fbe16612555
-SHA512 (kernel-abi-stablelists-5.14.0-656.el9.tar.bz2) = 2edeebf27de6336539c75d994b774cd0b6610f940a3af8e38e62e8125be6007ef125e0302eeaa49823297cd55f9eaf440bf5a0dd181b99257be3b180298b8138
-SHA512 (kernel-kabi-dw-5.14.0-656.el9.tar.bz2) = f54dc56e4b87d45bc93dd076387fbfef505e96604c3dbf0babc82fc6a6bdb6e11a57085d28dee52494136ecaa611b0b47802a4f594c6e0dfb5be03ceecb63bd6
+SHA512 (linux-5.14.0-657.el9.tar.xz) = 029676375c432161d4d2c100a2ee15eac3ed74d6877b35196dc8e391d62158acd9a9d71e21fe20b4dbfc40672fe421c7ce2d7a425a31cbe06e4f9d01646d84e6
+SHA512 (kernel-abi-stablelists-5.14.0-657.el9.tar.bz2) = 087005677f4e1e9b880d4432e6711b2e878dc58990087c208273a52543b25c174c7d3fdc83d4dd32f7d1a14f39421981fcbdc35f1de32ed2ddd5d1af48767589
+SHA512 (kernel-kabi-dw-5.14.0-657.el9.tar.bz2) = 8e9a211fac2c9e5ec4e0f118d56b7127ae311d846a97f4252923c717d9bec4d2b38c688622683342c3e89f9d1efe3cf115a4e5fda86a211963799d9e4c9a9f2a