diff --git a/Makefile.rhelver b/Makefile.rhelver
index 51e79aac5..e795183fe 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 8
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 666
+RHEL_RELEASE = 667
 
 #
 # ZSTREAM
diff --git a/kernel.changelog b/kernel.changelog
index 988b674ad..9ea2b75cd 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,26 @@
+* Mon Jan 26 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
+- nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
+- ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
+- ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
+- ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
+- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
+- scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]
+Resolves: RHEL-106827, RHEL-136530, RHEL-137065, RHEL-87800
+
 * Fri Jan 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
 - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
 - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
diff --git a/kernel.spec b/kernel.spec
index 6b3c82a54..892b8bcb9 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 666
+%define pkgrelease 667
 %define kversion 5
-%define tarfile_release 5.14.0-666.el9
+%define tarfile_release 5.14.0-667.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 666%{?buildid}%{?dist}
+%define specrelease 667%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-666.el9
+%define kabiversion 5.14.0-667.el9
 
 #
 # End of genspec.sh variables
@@ -3705,6 +3705,28 @@ fi
 #
 #
 %changelog
+* Mon Jan 26 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
+- nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
+- ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
+- ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
+- ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
+- ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
+- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
+- scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
+- scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]
+
 * Fri Jan 23 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
 - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
 - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
diff --git a/sources b/sources
index d80dae832..2eac0e4fe 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-666.el9.tar.xz) = f8ce183d86444186d77ec04c4d9c45abc74a5f13358251a3d9074827bfacf0925ce1e38b847607abc9e873a895b8d892506c35f57db8128f394ef9f3191dd629
-SHA512 (kernel-abi-stablelists-5.14.0-666.el9.tar.bz2) = 820b67bc03733769a51ad8b385fd1218642764693d4143321784b8f54bf1f046dfbe892d8b1b97fdbbc14be4ca50c0197fb037cc2709d0eab0aececa5f94ea1c
-SHA512 (kernel-kabi-dw-5.14.0-666.el9.tar.bz2) = 884468fc7d135588dc94b4372a48b904dc9a66a4a82e7b5974c2efc813e524896b9a98e48f3d9cdc26d5e95011d746c4fe2c32d5b5d8a29079cf11bcdcda157d
+SHA512 (linux-5.14.0-667.el9.tar.xz) = 1147c0de239dbe2e07a7e99df51d6228008244113b08cc9f3db05ee088a8bce1bd77d739d403d739834a82f7e3cfe2f2af04929d557511073cec365157b1cd9e
+SHA512 (kernel-abi-stablelists-5.14.0-667.el9.tar.bz2) = cfba95a8a71e5abd7dedf6b10b27b9dbe7c088044da40cf333b617568da77cbbbfdb131cc98fabcaa99e80460d86a210d8e74a392b5572014db0a37724a565b2
+SHA512 (kernel-kabi-dw-5.14.0-667.el9.tar.bz2) = 3fa00f04144167d208a4be233174393a8e594c51250d9dbaca82576e578d5e960dfb6e2cdd52175ad01900a6ea602b2feadc51deb6ac8a2c2d765f5f2aea6207