diff --git a/Makefile.rhelver b/Makefile.rhelver
index 78d163c2e..9f46df85f 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 3
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 256
+RHEL_RELEASE = 257
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index 21c517a86..f6a2992a4 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -3332,7 +3332,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 8b9041cd6..ff49ab796 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -3316,7 +3316,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 83dac15e9..853fe08ba 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -3329,7 +3329,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 2dd5e64a8..44953ce31 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -3313,7 +3313,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index c2a7845c1..e6a9b146d 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -3373,7 +3373,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index d6d0b3919..08a69e9b4 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -3357,7 +3357,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 2fbe2ad47..489621b8e 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -3370,7 +3370,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 4a02a6716..5ee6132db 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -3354,7 +3354,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IPMB_DEVICE_INTERFACE=m
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 85c8135f2..1a9975520 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -2829,7 +2829,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 4897e2933..344808aca 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -2813,7 +2813,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config
index fbec7c239..960521c3b 100644
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@@ -2837,7 +2837,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config
index 8f1b50d32..f8d691e51 100644
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@@ -2821,7 +2821,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 389c5a93e..9e6232f82 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -2816,7 +2816,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 # CONFIG_IPMI_DEVICE_INTERFACE is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 559a4cfc6..84e93ded6 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -2800,7 +2800,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 # CONFIG_IPMI_DEVICE_INTERFACE is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 64f65d417..02a6eeb15 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -2807,7 +2807,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 # CONFIG_IPMI_DEVICE_INTERFACE is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index ef84c3a5f..c011ff7ba 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -3065,7 +3065,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index d0c944957..81bec3495 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -3049,7 +3049,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 8a69ee302..def026f15 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -3106,7 +3106,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index bf505674d..36b540f86 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -3090,7 +3090,6 @@ CONFIG_IP6_NF_TARGET_REJECT=m
 # CONFIG_IPACK_BUS is not set
 CONFIG_IP_ADVANCED_ROUTER=y
 CONFIG_IPC_NS=y
-# CONFIG_IP_DCCP is not set
 CONFIG_IP_FIB_TRIE_STATS=y
 # CONFIG_IPMB_DEVICE_INTERFACE is not set
 CONFIG_IPMI_DEVICE_INTERFACE=m
diff --git a/kernel.changelog b/kernel.changelog
index de3c6c1f6..703b61e90 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,48 @@
+* Thu Aug 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
+- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
+- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
+- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
+- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
+- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
+- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
+- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
+- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
+- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
+- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
+- PCI: Align head space better (Myron Stowe) [RHEL-178011]
+- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
+- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
+- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
+- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
+- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
+- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
+- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
+- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
+- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
+- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
+- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
+- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
+- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
+- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
+- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
+- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
+- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
+- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
+- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
+- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
+- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
+- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
+- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
+- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
+- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
+- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
+- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
+- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]
+Resolves: RHEL-178011, RHEL-179873, RHEL-190345, RHEL-190430, RHEL-198358, RHEL-207634, RHEL-213608, RHEL-219079, RHEL-222562, RHEL-223625
+
 * Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
 - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
 - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
diff --git a/kernel.spec b/kernel.spec
index e3f2cf2a3..e87c66b29 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -179,15 +179,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 256
+%define pkgrelease 257
 %define kversion 6
-%define tarfile_release 6.12.0-256.el10
+%define tarfile_release 6.12.0-257.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 256%{?buildid}%{?dist}
+%define specrelease 257%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-256.el10
+%define kabiversion 6.12.0-257.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -2429,6 +2429,11 @@ BuildKernel() {
       cp arch/$Arch/boot/zImage.stub $RPM_BUILD_ROOT/lib/modules/$KernelVer/zImage.stub-$KernelVer || :
     fi
 
+%if %{with_efiuki}
+    # Preserve unsigned kernel for the UKI
+    cp $KernelImage $KernelImage.unsigned
+%endif
+
     %if %{signkernel}
     %{log_msg "Copy kernel for signing"}
     if [ "$KernelImage" = vmlinux ]; then
@@ -2866,6 +2871,15 @@ BuildKernel() {
         %{log_msg "Skipping efiuki build"}
     else
 %if %{with_efiuki}
+
+%if %{signkernel}%{signmodules}
+        # Sign inner vmlinuz with the transient modules signing key to allow kexec
+        KernelUnifiedVmlinuz="$KernelImage.signed.trans"
+        /lib/systemd/systemd-sbsign sign --certificate certs/signing_key.pem --private-key certs/signing_key.pem "$KernelImage.unsigned" --output $KernelUnifiedVmlinuz
+%else
+        KernelUnifiedVmlinuz="$KernelImage.unsigned"
+%endif
+
         %{log_msg "Setup the EFI UKI kernel"}
 
         KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
@@ -2883,7 +2897,7 @@ BuildKernel() {
            --logfile=$(mktemp) \
            $KernelUnifiedInitrd
 
-        ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \
+        ukify build --linux $KernelUnifiedVmlinuz --initrd $KernelUnifiedInitrd \
            --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \
            --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage
 
@@ -4645,6 +4659,50 @@ fi\
 #
 #
 %changelog
+* Thu Aug 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-257.el10]
+- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-222562]
+- wifi: ath12k: fix NULL pointer dereference in rhash table destroy (Filip Balluch) [RHEL-213608]
+- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-219079]
+- rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-207634]
+- rtla: Stop the record trace on interrupt (Tomas Glozar) [RHEL-207634]
+- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-198358]
+- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-190430]
+- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190345] {CVE-2026-53281}
+- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190345]
+- PCI: Update saved_config_space upon resource assignment (Myron Stowe) [RHEL-178011]
+- PCI: Align head space better (Myron Stowe) [RHEL-178011]
+- PCI: Rename window_alignment() to pci_min_window_alignment() (Myron Stowe) [RHEL-178011]
+- parisc/PCI: Clean up align handling (Myron Stowe) [RHEL-178011]
+- MIPS: PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- m68k/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- ARM/PCI: Remove unnecessary second application of align (Myron Stowe) [RHEL-178011]
+- resource: Rename 'tmp' variable to 'full_avail' (Myron Stowe) [RHEL-178011]
+- resource: Pass full extent of empty space to resource_alignf callback (Myron Stowe) [RHEL-178011]
+- resource: Add __resource_contains_unbound() for internal contains checks (Myron Stowe) [RHEL-178011]
+- PCI: Prevent assignment to unsupported bridge windows (Myron Stowe) [RHEL-178011]
+- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Myron Stowe) [RHEL-178011]
+- resource: improve child resource handling in release_mem_region_adjustable() (Myron Stowe) [RHEL-178011]
+- resource: fix false warning in __request_region() (Myron Stowe) [RHEL-178011]
+- kernel/resource: simplify API __devm_release_region() implementation (Myron Stowe) [RHEL-178011]
+- resource: avoid unnecessary resource tree walking in __region_intersects() (Myron Stowe) [RHEL-178011]
+- resource: correct reallocate_resource() documentation (Myron Stowe) [RHEL-178011]
+- resource: introduce is_type_match() helper and use it (Myron Stowe) [RHEL-178011]
+- resource: replace open coded resource_intersection() (Myron Stowe) [RHEL-178011]
+- selinux: suppress warning flood for retired DCCP netlink messages (Ivan Vecera) [RHEL-179873]
+- dccp Remove inet_hashinfo2_init_mod(). (Ivan Vecera) [RHEL-179873]
+- tcp: Move TCP-specific diag functions to tcp_diag.c. (Ivan Vecera) [RHEL-179873]
+- tcp: Don't pass hashinfo to inet_diag helpers. (Ivan Vecera) [RHEL-179873]
+- tcp: Don't pass hashinfo to socket lookup helpers. (Ivan Vecera) [RHEL-179873]
+- tcp: Remove hashinfo test for inet6?_lookup_run_sk_lookup(). (Ivan Vecera) [RHEL-179873]
+- tcp: Remove timewait_sock_ops.twsk_destructor(). (Ivan Vecera) [RHEL-179873]
+- tcp: Remove sk_protocol test for tcp_twsk_unique(). (Ivan Vecera) [RHEL-179873]
+- tcp: Rename tcp_or_dccp_get_hashinfo(). (Ivan Vecera) [RHEL-179873]
+- net: Unexport shared functions for DCCP. (Ivan Vecera) [RHEL-179873]
+- net: Retire DCCP socket. (Ivan Vecera) [RHEL-179873]
+- selftest: net: Remove DCCP bits. (Ivan Vecera) [RHEL-179873]
+- selinux: apply clang format to security/selinux/nlmsgtab.c (Ivan Vecera) [RHEL-179873]
+- redhat: sign UKI's inner vmlinuz with modules signing key (Vitaly Kuznetsov) [RHEL-223625]
+
 * Wed Aug 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-256.el10]
 - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219622] {CVE-2026-64320}
 - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-193996]
diff --git a/sources b/sources
index 4f47b4449..db6938ca5 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-256.el10.tar.xz) = 960a3d7b045eab2878601744f07b8014de57b4a3e19b8fe310cfd246f79262c7d2e0352704fb575ee896b214aa86b8ed17958e1f8558e964bf0c273c22736bc9
-SHA512 (kernel-abi-stablelists-6.12.0-256.el10.tar.xz) = 86a77e2a1c9a12e0de075a3ca16851434c51b9637b0b26e017055fb9372aae80d1fe94890f727b5e8c7f9034d5b0ba2bdb7daf0ab1fa4c3f54fc2fa46cd7e456
-SHA512 (kernel-kabi-dw-6.12.0-256.el10.tar.xz) = 1042a04361c42ab837d7cc400136ddee9270c8c74e0ed62d87ec7e1c56475a5229323bafb4b4d5459584a4d534fc8f289daa9cfe70ebf650df7bee551ef19e49
+SHA512 (linux-6.12.0-257.el10.tar.xz) = e5b22b41dadfdfb71dd8fd2fbb20be034f1af3779c2c830bdb1efce5adf148d180193f59f601dc05f3862ca3ce58a6f02a26b3ab6c5f0b75363332449d2295bf
+SHA512 (kernel-abi-stablelists-6.12.0-257.el10.tar.xz) = 7db20f040da3b45776201505cf3e008a2a96fc148f6eed9e3bd7105e96f6ec660cbbea12defa4b115a853d5c1a87ddd5eef6e60e80679d0b02a3c39ba1e35c22
+SHA512 (kernel-kabi-dw-6.12.0-257.el10.tar.xz) = bad09a6a6d276865c522910c4ef3e607e183eeaa09561fb9061bd52dc6aaf7aefae0b58d55028eb8a71fe3c23edb9205d0d709bb156ec0e0a87718b72dd79ddc