diff --git a/Makefile.rhelver b/Makefile.rhelver
index 1c36fe8a8..8a7823949 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 9
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 703
+RHEL_RELEASE = 704
 
 #
 # ZSTREAM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index beb364205..02ac00e30 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -3340,6 +3340,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 753e679be..7711561e0 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -3319,6 +3319,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 20d6755d4..7479bbe15 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -3338,6 +3338,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 5bd764fc7..92c3e9de7 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -3317,6 +3317,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 0b965990e..79668f136 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -3400,6 +3400,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 258cc8747..cc812bc4a 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -3379,6 +3379,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 38bdb6619..609bb96e7 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -3398,6 +3398,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 38888da04..d7b3eab8d 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -3377,6 +3377,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MDIO_XGENE=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index cd24c65ec..3fb700531 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -3002,6 +3002,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index f9d24ab31..879b59e64 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -2982,6 +2982,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 8e4c77632..42f8040ec 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -2996,6 +2996,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index af4fa64b8..7055c028e 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -2976,6 +2976,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 605b77cba..df6220dab 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -2989,6 +2989,7 @@ CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 # CONFIG_MD is not set
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 41eeebc0a..f436fdb27 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -3196,6 +3196,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 5e6b2f73d..67c1ce4e4 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -3176,6 +3176,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index b7e2d3d1c..a7d586fd3 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -3255,6 +3255,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 5c25ca796..7714701b4 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -3235,6 +3235,7 @@ CONFIG_MDIO_MSCC_MIIM=m
 CONFIG_MDIO_OCTEON=m
 CONFIG_MDIO_THUNDER=m
 CONFIG_MD_LINEAR=m
+# CONFIG_MD_LLBITMAP is not set
 # CONFIG_MD_MULTIPATH is not set
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID10=m
diff --git a/kernel.changelog b/kernel.changelog
index 81f1a9261..737dd5381 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,116 @@
+* Tue May 12 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-704.el9]
+- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Expose all package CPUs in PMU cpumask (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Remove incorrect CPU check in PMU context (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Add PL4 support for Ice Lake (David Arcari) [RHEL-128568]
+- powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Fix possible recursive lock warning (David Arcari) [RHEL-128568]
+- powercap: fix sscanf() error return value handling (David Arcari) [RHEL-128568]
+- powercap: fix race condition in register_control_type() (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Enable MSR-based RAPL PMU support (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Add support for Nova Lake processors (David Arcari) [RHEL-128568]
+- powercap: idle_inject: use us_to_ktime() where appropriate (David Arcari) [RHEL-128568]
+- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172741] {CVE-2026-43051}
+- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163491]
+- RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163491]
+- RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163491]
+- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163491]
+- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163491]
+- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163491]
+- RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163491]
+- IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163491]
+- RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163491]
+- RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163491]
+- RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163491]
+- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163491]
+- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-99101]
+- md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129338]
+- md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129338]
+- md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Nigel Croxon) [RHEL-129338]
+- md: ignore discard return value (Nigel Croxon) [RHEL-129338]
+- dm: clear unmap write zeroes limits when disabling write zeroes (Nigel Croxon) [RHEL-129338]
+- md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129338]
+- md: fix return value of mddev_trylock (Nigel Croxon) [RHEL-129338]
+- md/raid1: fix memory leak in raid1_run() (Nigel Croxon) [RHEL-129338]
+- md raid: fix hang when stopping arrays with metadata through dm-raid (Nigel Croxon) [RHEL-129338]
+- md-cluster: fix NULL pointer dereference in process_metadata_update (Nigel Croxon) [RHEL-129338]
+- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129338]
+- md: remove recovery_disabled (Nigel Croxon) [RHEL-129338]
+- md/raid10: cleanup skip handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
+- md/raid10: fix any_working flag handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
+- md: move finish_reshape to md_finish_sync() (Nigel Croxon) [RHEL-129338]
+- md: factor out sync completion update into helper (Nigel Croxon) [RHEL-129338]
+- md: remove MD_RECOVERY_ERROR handling and simplify resync_offset update (Nigel Croxon) [RHEL-129338]
+- md: update curr_resync_completed even when MD_RECOVERY_INTR is set (Nigel Croxon) [RHEL-129338]
+- md: factor error handling out of md_done_sync into helper (Nigel Croxon) [RHEL-129338]
+- md/raid1: simplify uptodate handling in end_sync_write (Nigel Croxon) [RHEL-129338]
+- md/raid5: make sure max_sectors is not less than io_opt (Nigel Croxon) [RHEL-129338]
+- md/raid5: use mempool to allocate stripe_request_ctx (Nigel Croxon) [RHEL-129338]
+- md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix raid5_run() to return error when log_init() fails (Nigel Croxon) [RHEL-129338]
+- md: fix missing integer (Nigel Croxon) [RHEL-129338]
+- md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129338]
+- md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129338]
+- md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129338] {CVE-2025-71225}
+- md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129338] {CVE-2025-71135}
+- md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129338]
+- md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129338]
+- md: warn about updating super block failure (Nigel Croxon) [RHEL-129338]
+- md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129338]
+- md: allow configuring logical block size (Nigel Croxon) [RHEL-129338]
+- md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129338]
+- md: fix how device node is created and removed (Nigel Croxon) [RHEL-129338]
+- md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129338]
+- md: init bioset in mddev_init (Nigel Croxon) [RHEL-129338] {CVE-2025-68368}
+- md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129338]
+- md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129338]
+- md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129338]
+- md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129338] {CVE-2025-68373}
+- md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129338]
+- md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129338]
+- Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129338]
+- md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129338] {CVE-2025-68374}
+- md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129338]
+- md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129338]
+- md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129338]
+- md: factor out a helper raid_is_456() (Nigel Croxon) [RHEL-129338]
+- md: add a new parameter 'offset' to md_super_write() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129338]
+- md: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid5: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid10: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid1: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: remove the parameter 'init' for bitmap_ops->resize() (Nigel Croxon) [RHEL-129338]
+- md/raid1: check bitmap before behind write (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: handle the case bitmap is not enabled before end_sync() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: handle the case bitmap is not enabled before start_sync() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add md_bitmap_registered/enabled() helper (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new parameter 'flush' to bitmap_ops->enabled (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: merge md_bitmap_group into bitmap_operations (Nigel Croxon) [RHEL-129338]
+- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
+- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
+- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [RHEL-145583]
+Resolves: RHEL-128568, RHEL-129338, RHEL-145583, RHEL-148781, RHEL-163491, RHEL-172741, RHEL-99101
+
 * Thu May 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-703.el9]
 - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-164873]
 - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-168115]
diff --git a/kernel.spec b/kernel.spec
index d0320bd9c..474175119 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 703
+%define pkgrelease 704
 %define kversion 5
-%define tarfile_release 5.14.0-703.el9
+%define tarfile_release 5.14.0-704.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 703%{?buildid}%{?dist}
+%define specrelease 704%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-703.el9
+%define kabiversion 5.14.0-704.el9
 
 #
 # End of genspec.sh variables
@@ -3753,6 +3753,118 @@ fi
 #
 #
 %changelog
+* Tue May 12 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-704.el9]
+- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Expose all package CPUs in PMU cpumask (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Remove incorrect CPU check in PMU context (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Add PL4 support for Ice Lake (David Arcari) [RHEL-128568]
+- powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Fix possible recursive lock warning (David Arcari) [RHEL-128568]
+- powercap: fix sscanf() error return value handling (David Arcari) [RHEL-128568]
+- powercap: fix race condition in register_control_type() (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Enable MSR-based RAPL PMU support (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
+- x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
+- powercap: intel_rapl: Add support for Nova Lake processors (David Arcari) [RHEL-128568]
+- powercap: idle_inject: use us_to_ktime() where appropriate (David Arcari) [RHEL-128568]
+- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172741] {CVE-2026-43051}
+- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163491]
+- RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163491]
+- RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163491]
+- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163491]
+- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163491]
+- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163491]
+- RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163491]
+- IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163491]
+- RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163491]
+- RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163491]
+- RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163491]
+- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163491]
+- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-99101]
+- md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129338]
+- md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129338]
+- md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Nigel Croxon) [RHEL-129338]
+- md: ignore discard return value (Nigel Croxon) [RHEL-129338]
+- dm: clear unmap write zeroes limits when disabling write zeroes (Nigel Croxon) [RHEL-129338]
+- md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129338]
+- md: fix return value of mddev_trylock (Nigel Croxon) [RHEL-129338]
+- md/raid1: fix memory leak in raid1_run() (Nigel Croxon) [RHEL-129338]
+- md raid: fix hang when stopping arrays with metadata through dm-raid (Nigel Croxon) [RHEL-129338]
+- md-cluster: fix NULL pointer dereference in process_metadata_update (Nigel Croxon) [RHEL-129338]
+- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129338]
+- md: remove recovery_disabled (Nigel Croxon) [RHEL-129338]
+- md/raid10: cleanup skip handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
+- md/raid10: fix any_working flag handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
+- md: move finish_reshape to md_finish_sync() (Nigel Croxon) [RHEL-129338]
+- md: factor out sync completion update into helper (Nigel Croxon) [RHEL-129338]
+- md: remove MD_RECOVERY_ERROR handling and simplify resync_offset update (Nigel Croxon) [RHEL-129338]
+- md: update curr_resync_completed even when MD_RECOVERY_INTR is set (Nigel Croxon) [RHEL-129338]
+- md: factor error handling out of md_done_sync into helper (Nigel Croxon) [RHEL-129338]
+- md/raid1: simplify uptodate handling in end_sync_write (Nigel Croxon) [RHEL-129338]
+- md/raid5: make sure max_sectors is not less than io_opt (Nigel Croxon) [RHEL-129338]
+- md/raid5: use mempool to allocate stripe_request_ctx (Nigel Croxon) [RHEL-129338]
+- md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix raid5_run() to return error when log_init() fails (Nigel Croxon) [RHEL-129338]
+- md: fix missing integer (Nigel Croxon) [RHEL-129338]
+- md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129338]
+- md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129338]
+- md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129338] {CVE-2025-71225}
+- md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129338] {CVE-2025-71135}
+- md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129338]
+- md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129338]
+- md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129338]
+- md: warn about updating super block failure (Nigel Croxon) [RHEL-129338]
+- md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129338]
+- md: allow configuring logical block size (Nigel Croxon) [RHEL-129338]
+- md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129338]
+- md: fix how device node is created and removed (Nigel Croxon) [RHEL-129338]
+- md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129338]
+- md: init bioset in mddev_init (Nigel Croxon) [RHEL-129338] {CVE-2025-68368}
+- md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129338]
+- md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129338]
+- md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129338]
+- md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129338] {CVE-2025-68373}
+- md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129338]
+- md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129338]
+- Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129338]
+- md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129338] {CVE-2025-68374}
+- md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129338]
+- md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129338]
+- md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129338]
+- md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129338]
+- md: factor out a helper raid_is_456() (Nigel Croxon) [RHEL-129338]
+- md: add a new parameter 'offset' to md_super_write() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129338]
+- md: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid5: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid10: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/raid1: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: remove the parameter 'init' for bitmap_ops->resize() (Nigel Croxon) [RHEL-129338]
+- md/raid1: check bitmap before behind write (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: handle the case bitmap is not enabled before end_sync() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: handle the case bitmap is not enabled before start_sync() (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add md_bitmap_registered/enabled() helper (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: add a new parameter 'flush' to bitmap_ops->enabled (Nigel Croxon) [RHEL-129338]
+- md/md-bitmap: merge md_bitmap_group into bitmap_operations (Nigel Croxon) [RHEL-129338]
+- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
+- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
+- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [RHEL-145583]
+
 * Thu May 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-703.el9]
 - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-164873]
 - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-168115]
diff --git a/sources b/sources
index 9fde4e42a..b23e75955 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-703.el9.tar.xz) = 560a58c70288d45391ff12398e3c92e397f6914731d3fed29c02973969af662ec1c0a624e17965c7f80e0770787f2bd2721de6c08f6e64756114f58cb1770702
-SHA512 (kernel-abi-stablelists-5.14.0-703.el9.tar.bz2) = 9bf45e06c529917f230a6a4274699ea054c72b44e56b62763391b55303412dcf2044ee944ccf2728f24f10b455d24b72f4b4a1fcbc50623f6a9c1811cf8d933d
-SHA512 (kernel-kabi-dw-5.14.0-703.el9.tar.bz2) = 7d2863f5756e1273c1c7ce1938d30d5fd44daf22d6df12e275b893d7a3f7acf87b294f94a7f5b406a97511ebc92c12e5344c62d8d72d8b24ec16fc83704ef998
+SHA512 (linux-5.14.0-704.el9.tar.xz) = f4ae228acd940ab2ed857e33e3658b19c541ac227871806385f8e04d0dd81f333e45d6044573a928d4521c250e22c511123d354d2e989966049491d203e95520
+SHA512 (kernel-abi-stablelists-5.14.0-704.el9.tar.bz2) = c2fe67fb34b24810306ad455715e72bf13060c360e23ce489bec9b4be6c7f62d4274f48a5fea34719104cad54b623e1154ecc5ced6ef76c7ecd5e4133a0800e6
+SHA512 (kernel-kabi-dw-5.14.0-704.el9.tar.bz2) = 2fce88f0fdc5f5e4d61a58b323292c12237e22aae6f93b7ee239ca059d770b8775f4269583ef8ddc862d5d9fbf57dac4452ceb947f50bc58d7e72f3c7f08e34c