diff --git a/.gitignore b/.gitignore
index 087ce5e4e..e2d13452e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-SOURCES/kernel-abi-stablelists-5.14.0-611.35.1.el9_7.tar.bz2
-SOURCES/kernel-kabi-dw-5.14.0-611.35.1.el9_7.tar.bz2
-SOURCES/linux-5.14.0-611.35.1.el9_7.tar.xz
+SOURCES/kernel-abi-stablelists-5.14.0-611.36.1.el9_7.tar.bz2
+SOURCES/kernel-kabi-dw-5.14.0-611.36.1.el9_7.tar.bz2
+SOURCES/linux-5.14.0-611.36.1.el9_7.tar.xz
 SOURCES/nvidiagpuoot001.x509
 SOURCES/olima1.x509
 SOURCES/olimaca1.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index 6eddf93e0..fd3e24f0d 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,6 +1,6 @@
-eed29bd83c40e43709eb6a842e4dc3a99a5e9881 SOURCES/kernel-abi-stablelists-5.14.0-611.35.1.el9_7.tar.bz2
-74eb7acb8454903bdb5746eb64de76230ca8b27b SOURCES/kernel-kabi-dw-5.14.0-611.35.1.el9_7.tar.bz2
-f4a191e7e96d2858188f3cc8d897e3f06fd0dd5c SOURCES/linux-5.14.0-611.35.1.el9_7.tar.xz
+4be4e41c931240d8c7c34f52e24491ed28e9b1a0 SOURCES/kernel-abi-stablelists-5.14.0-611.36.1.el9_7.tar.bz2
+98ec148e5ca656c31cb824edc3da468e86d507b1 SOURCES/kernel-kabi-dw-5.14.0-611.36.1.el9_7.tar.bz2
+bf97bf9b8ec9843cedb197e39a65fdf7848e2bbb SOURCES/linux-5.14.0-611.36.1.el9_7.tar.xz
 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
 706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509
 6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 6ea0bba4c..b118f9faf 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 7
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 611.35.1
+RHEL_RELEASE = 611.36.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel-aarch64-64k-debug-rhel.config b/SOURCES/kernel-aarch64-64k-debug-rhel.config
index 6d791244b..7a65bbc6e 100644
--- a/SOURCES/kernel-aarch64-64k-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-debug-rhel.config
@@ -3934,8 +3934,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-64k-rhel.config b/SOURCES/kernel-aarch64-64k-rhel.config
index 81099049d..721234c43 100644
--- a/SOURCES/kernel-aarch64-64k-rhel.config
+++ b/SOURCES/kernel-aarch64-64k-rhel.config
@@ -3913,8 +3913,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-debug-rhel.config b/SOURCES/kernel-aarch64-debug-rhel.config
index 260d07718..c943bcd62 100644
--- a/SOURCES/kernel-aarch64-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-debug-rhel.config
@@ -3932,8 +3932,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-rhel.config b/SOURCES/kernel-aarch64-rhel.config
index 937517ff6..8c4283fb4 100644
--- a/SOURCES/kernel-aarch64-rhel.config
+++ b/SOURCES/kernel-aarch64-rhel.config
@@ -3911,8 +3911,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-rt-64k-debug-rhel.config b/SOURCES/kernel-aarch64-rt-64k-debug-rhel.config
index 7f05df526..b3961c601 100644
--- a/SOURCES/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-64k-debug-rhel.config
@@ -4007,8 +4007,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-rt-64k-rhel.config b/SOURCES/kernel-aarch64-rt-64k-rhel.config
index 5fad1e562..1f98063e6 100644
--- a/SOURCES/kernel-aarch64-rt-64k-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-64k-rhel.config
@@ -3986,8 +3986,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-rt-debug-rhel.config b/SOURCES/kernel-aarch64-rt-debug-rhel.config
index 40f8dd474..60c51290f 100644
--- a/SOURCES/kernel-aarch64-rt-debug-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-debug-rhel.config
@@ -4005,8 +4005,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-aarch64-rt-rhel.config b/SOURCES/kernel-aarch64-rt-rhel.config
index 6a423af01..1a1ec878a 100644
--- a/SOURCES/kernel-aarch64-rt-rhel.config
+++ b/SOURCES/kernel-aarch64-rt-rhel.config
@@ -3984,8 +3984,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-ppc64le-debug-rhel.config b/SOURCES/kernel-ppc64le-debug-rhel.config
index 910710e0b..a16f08553 100644
--- a/SOURCES/kernel-ppc64le-debug-rhel.config
+++ b/SOURCES/kernel-ppc64le-debug-rhel.config
@@ -3559,8 +3559,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-ppc64le-kvm-debug-rhel.config b/SOURCES/kernel-ppc64le-kvm-debug-rhel.config
index 477170810..abda5af0f 100644
--- a/SOURCES/kernel-ppc64le-kvm-debug-rhel.config
+++ b/SOURCES/kernel-ppc64le-kvm-debug-rhel.config
@@ -3564,8 +3564,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-ppc64le-kvm-rhel.config b/SOURCES/kernel-ppc64le-kvm-rhel.config
index cb9f9a39f..0c04fc42c 100644
--- a/SOURCES/kernel-ppc64le-kvm-rhel.config
+++ b/SOURCES/kernel-ppc64le-kvm-rhel.config
@@ -3544,8 +3544,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-ppc64le-rhel.config b/SOURCES/kernel-ppc64le-rhel.config
index eca364099..3617705b6 100644
--- a/SOURCES/kernel-ppc64le-rhel.config
+++ b/SOURCES/kernel-ppc64le-rhel.config
@@ -3539,8 +3539,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-s390x-debug-rhel.config b/SOURCES/kernel-s390x-debug-rhel.config
index 0984bdadd..4e4066e76 100644
--- a/SOURCES/kernel-s390x-debug-rhel.config
+++ b/SOURCES/kernel-s390x-debug-rhel.config
@@ -3550,8 +3550,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-s390x-rhel.config b/SOURCES/kernel-s390x-rhel.config
index 64777256f..68f948124 100644
--- a/SOURCES/kernel-s390x-rhel.config
+++ b/SOURCES/kernel-s390x-rhel.config
@@ -3530,8 +3530,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-s390x-zfcpdump-rhel.config b/SOURCES/kernel-s390x-zfcpdump-rhel.config
index 033dcca82..058120f28 100644
--- a/SOURCES/kernel-s390x-zfcpdump-rhel.config
+++ b/SOURCES/kernel-s390x-zfcpdump-rhel.config
@@ -3542,8 +3542,8 @@ CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
 CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 # CONFIG_NETFS_SUPPORT is not set
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-x86_64-debug-rhel.config b/SOURCES/kernel-x86_64-debug-rhel.config
index 2f234539e..f4a7885ec 100644
--- a/SOURCES/kernel-x86_64-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-debug-rhel.config
@@ -3790,8 +3790,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-x86_64-rhel.config b/SOURCES/kernel-x86_64-rhel.config
index b04f31823..5f293ad10 100644
--- a/SOURCES/kernel-x86_64-rhel.config
+++ b/SOURCES/kernel-x86_64-rhel.config
@@ -3770,8 +3770,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-x86_64-rt-debug-rhel.config b/SOURCES/kernel-x86_64-rt-debug-rhel.config
index 45caf755a..a2d2945fa 100644
--- a/SOURCES/kernel-x86_64-rt-debug-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-debug-rhel.config
@@ -3861,8 +3861,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel-x86_64-rt-rhel.config b/SOURCES/kernel-x86_64-rt-rhel.config
index 72032d944..751b0a92c 100644
--- a/SOURCES/kernel-x86_64-rt-rhel.config
+++ b/SOURCES/kernel-x86_64-rt-rhel.config
@@ -3841,8 +3841,8 @@ CONFIG_NETFILTER_XT_TARGET_TEE=m
 CONFIG_NETFILTER_XT_TARGET_TPROXY=m
 CONFIG_NETFILTER_XT_TARGET_TRACE=m
 CONFIG_NETFILTER=y
-# CONFIG_NET_FOU_IP_TUNNELS is not set
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_NET_FOU=m
 CONFIG_NETFS_STATS=y
 CONFIG_NETFS_SUPPORT=m
 CONFIG_NET_HANDSHAKE_KUNIT_TEST=m
diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog
index 0614fe729..8c909d3de 100644
--- a/SOURCES/kernel.changelog
+++ b/SOURCES/kernel.changelog
@@ -1,3 +1,31 @@
+* Tue Feb 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.36.1.el9_7]
+- net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-143718]
+- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-149495]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147266] {CVE-2026-23097}
+- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148166]
+- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144987]
+- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144987]
+- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144987]
+- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144987]
+- fou: fix initialization of grc (Xin Long) [RHEL-144987]
+- fou: Fix null-ptr-deref in GRO. (Xin Long) [RHEL-144987]
+- fou: remove warn in gue_gro_receive on unsupported protocol (Xin Long) [RHEL-144987]
+- fou: Remove XRFM from NET_FOU Kconfig (Xin Long) [RHEL-144987]
+- fou: remove sparse errors (Xin Long) [RHEL-144987]
+- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144987]
+- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143713]
+- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146357]
+- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-147459]
+- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-147459]
+- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-147459]
+- i40e: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
+- ice: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
+- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-146049]
+- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143545] {CVE-2025-71085}
+- tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-141462]
+- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130017] {CVE-2025-40168}
+Resolves: RHEL-128237, RHEL-130017, RHEL-141462, RHEL-143545, RHEL-143713, RHEL-143718, RHEL-144987, RHEL-146049, RHEL-146357, RHEL-147266, RHEL-147459, RHEL-148166, RHEL-149495
+
 * Tue Feb 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.35.1.el9_7]
 - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-137841] {CVE-2025-38129}
 - exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146403] {CVE-2025-38206}
diff --git a/SOURCES/mod-extra.list.rhel b/SOURCES/mod-extra.list.rhel
index f9ec7eb96..c63247ed3 100644
--- a/SOURCES/mod-extra.list.rhel
+++ b/SOURCES/mod-extra.list.rhel
@@ -47,6 +47,8 @@ ems_pci.ko
 ems_usb.ko
 esd_usb2.ko
 esi-sir.ko
+fou.ko
+fou6.ko
 gamecon.ko
 gf2k.ko
 gigaset.ko
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 4ef9738e0..3d696b8c0 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 611.35.1
+%define pkgrelease 611.36.1
 %define kversion 5
-%define tarfile_release 5.14.0-611.35.1.el9_7
+%define tarfile_release 5.14.0-611.36.1.el9_7
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 611.35.1%{?buildid}%{?dist}
+%define specrelease 611.36.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-611.35.1.el9_7
+%define kabiversion 5.14.0-611.36.1.el9_7
 
 #
 # End of genspec.sh variables
@@ -3771,7 +3771,7 @@ fi
 #
 #
 %changelog
-* Wed Feb 25 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-611.35.1
+* Tue Mar 03 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 5.14.0-611.36.1
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -3782,11 +3782,38 @@ fi
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
-* Wed Feb 25 2026 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-611.35.1
+* Tue Mar 03 2026 Eduard Abdullin <eabdullin@almalinux.org> - 5.14.0-611.36.1
 - Use AlmaLinux OS secure boot cert
 - Debrand for AlmaLinux OS
 - Add KVM support for ppc64le
 
+* Tue Feb 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.36.1.el9_7]
+- net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-143718]
+- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-149495]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147266] {CVE-2026-23097}
+- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148166]
+- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144987]
+- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144987]
+- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144987]
+- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144987]
+- fou: fix initialization of grc (Xin Long) [RHEL-144987]
+- fou: Fix null-ptr-deref in GRO. (Xin Long) [RHEL-144987]
+- fou: remove warn in gue_gro_receive on unsupported protocol (Xin Long) [RHEL-144987]
+- fou: Remove XRFM from NET_FOU Kconfig (Xin Long) [RHEL-144987]
+- fou: remove sparse errors (Xin Long) [RHEL-144987]
+- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144987]
+- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143713]
+- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146357]
+- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-147459]
+- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-147459]
+- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-147459]
+- i40e: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
+- ice: add rh_phys_port_name mod option to behave like upstream (CKI Backport Bot) [RHEL-128237]
+- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-146049]
+- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143545] {CVE-2025-71085}
+- tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-141462]
+- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130017] {CVE-2025-40168}
+
 * Tue Feb 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.35.1.el9_7]
 - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-137841] {CVE-2025-38129}
 - exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146403] {CVE-2025-38206}