diff --git a/Makefile.rhelver b/Makefile.rhelver
index 64a82fb5f..4a3d7c868 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 1
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 58
+RHEL_RELEASE = 59
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel.changelog b/kernel.changelog
index 1858a18ed..f21806693 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,13 @@
+* Mon Mar 03 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-59.el10]
+- gpu: host1x: Fix a use of uninitialized mutex (Rupinderjit Singh) [RHEL-67594]
+- selftests/memfd: add test for mapping write-sealed memfd read-only (Rafael Aquini) [RHEL-77292] {CVE-2024-57937}
+- mm: reinstate ability to map write-sealed memfd mappings read-only (Rafael Aquini) [RHEL-77292] {CVE-2024-57937}
+- bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-74426]
+- redhat: adjust rhel branch name (Jan Stancek)
+- redhat: set defaults for RHEL 10.0 (Jan Stancek)
+- Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-76109]
+Resolves: RHEL-67594, RHEL-74426, RHEL-77292
+
 * Thu Feb 27 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-58.el10]
 - quota: flush quota_release_work upon quota writeback (CKI Backport Bot) [RHEL-73465]
 - s390/topology: Improve topology detection (Mete Durlu) [RHEL-76349]
diff --git a/kernel.spec b/kernel.spec
index 7463ac089..79acea2e4 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -164,15 +164,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 58
+%define pkgrelease 59
 %define kversion 6
-%define tarfile_release 6.12.0-58.el10
+%define tarfile_release 6.12.0-59.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 58%{?buildid}%{?dist}
+%define specrelease 59%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-58.el10
+%define kabiversion 6.12.0-59.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4358,7 +4358,7 @@ fi\
 #
 #
 %changelog
-* Sat Mar 01 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-58
+* Wed Mar 05 2025 Andrei Lukoshko <alukoshko@almalinux.org> - 6.12.0-59
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4369,10 +4369,19 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Sat Mar 01 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-58
+* Wed Mar 05 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-59
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 
+* Mon Mar 03 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-59.el10]
+- gpu: host1x: Fix a use of uninitialized mutex (Rupinderjit Singh) [RHEL-67594]
+- selftests/memfd: add test for mapping write-sealed memfd read-only (Rafael Aquini) [RHEL-77292] {CVE-2024-57937}
+- mm: reinstate ability to map write-sealed memfd mappings read-only (Rafael Aquini) [RHEL-77292] {CVE-2024-57937}
+- bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-74426]
+- redhat: adjust rhel branch name (Jan Stancek)
+- redhat: set defaults for RHEL 10.0 (Jan Stancek)
+- Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-76109]
+
 * Thu Feb 27 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-58.el10]
 - quota: flush quota_release_work upon quota writeback (CKI Backport Bot) [RHEL-73465]
 - s390/topology: Improve topology detection (Mete Durlu) [RHEL-76349]
diff --git a/sources b/sources
index 5e477aefd..7765adc3c 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-58.el10.tar.xz) = 11620be4686047e013d8fd81280d14ddc086d8a9c092aa65f692ab98e7a5657d34d01f6831ed3c12982f8958a5028ce261dea746c7c22f6b77ccf3e0fb382464
-SHA512 (kernel-abi-stablelists-6.12.0-58.el10.tar.xz) = 1b3eb19d4e0e138d2d730bf81e1ea016d12f179f7d862d7f48bcb50b8861b5b97eea1e2347f87dc466a7cd2006787cf836be4311e01c99f27419bedb852ea81c
-SHA512 (kernel-kabi-dw-6.12.0-58.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d
+SHA512 (linux-6.12.0-59.el10.tar.xz) = 06aaacb44b7d93ba40a08eda4a210c07b5e556cde4db1b1ef731f62775cf8200331a6ac3298f0faa0e85bd818bedbce3ca74d85cfdc5344c6ede97b8f5e0754c
+SHA512 (kernel-abi-stablelists-6.12.0-59.el10.tar.xz) = 3e8e87ae6fab84b3e121011c7b591d76ebba90f8368579b8e706f54b85bfeb76d268e4205f432343cc674e45f8fa9142be6b508dc4f9e091b895b8c08c43aa75
+SHA512 (kernel-kabi-dw-6.12.0-59.el10.tar.xz) = 363638a37d0822f41ee10a642eba36b7442adc8697b96afc32d0dfe7cdfef25279d16621d6a9d75e29ec659a379ba2be6b7a92e59255bdeb00c17b5d4b54690d