diff --git a/.gitignore b/.gitignore
index 5fb55b6d3..7bcf9e5dc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,9 +1,7 @@
-SOURCES/kernel-abi-stablelists-5.14.0-570.24.1.el9_6.tar.bz2
-SOURCES/kernel-kabi-dw-5.14.0-570.24.1.el9_6.tar.bz2
-SOURCES/linux-5.14.0-570.24.1.el9_6.tar.xz
+SOURCES/kernel-abi-stablelists-5.14.0-570.25.1.el9_6.tar.bz2
+SOURCES/kernel-kabi-dw-5.14.0-570.25.1.el9_6.tar.bz2
+SOURCES/linux-5.14.0-570.25.1.el9_6.tar.xz
 SOURCES/nvidiagpuoot001.x509
-SOURCES/olima1.x509
-SOURCES/olimaca1.x509
 SOURCES/rheldup3.x509
 SOURCES/rhelima.x509
 SOURCES/rhelima_centos.x509
diff --git a/.kernel.metadata b/.kernel.metadata
index fd3ba8459..e4300ed97 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,9 +1,7 @@
-58a9dff9b43756774942a719208e704dd5008a20 SOURCES/kernel-abi-stablelists-5.14.0-570.24.1.el9_6.tar.bz2
-19e7ef500d46ec8035398bb502754bb8c90746fd SOURCES/kernel-kabi-dw-5.14.0-570.24.1.el9_6.tar.bz2
-c82aee70bcaebd64ba62c26f89f98c8b92521b31 SOURCES/linux-5.14.0-570.24.1.el9_6.tar.xz
+58ec1300860989604f5178c7507f489c4e3d8486 SOURCES/kernel-abi-stablelists-5.14.0-570.25.1.el9_6.tar.bz2
+01e37dbf48a38be2b770adacf5008de7f7fa9afb SOURCES/kernel-kabi-dw-5.14.0-570.25.1.el9_6.tar.bz2
+497f86808656b68462bd741a58ff24b0ba22b99d SOURCES/linux-5.14.0-570.25.1.el9_6.tar.xz
 4fff8080e88afffc06d8ef5004db8d53bb21237f SOURCES/nvidiagpuoot001.x509
-706ae01dd14efa38f0f565a3706acac19c78df02 SOURCES/olima1.x509
-6e3f0d61414c0b50f48dc2d4c3b3cd024e1c3a43 SOURCES/olimaca1.x509
 95b9b811c7b0a6c98b2eafc4e7d6d24f2cb63289 SOURCES/rheldup3.x509
 99e571f9de4188f3b5fdf1f84ff73f6cc4bb6a0e SOURCES/rhelima.x509
 61d5a223ff0c79189505abae77e0087c4b2d2b47 SOURCES/rhelima_centos.x509
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 58e41adda..02ac9c022 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 6
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 570.24.1
+RHEL_RELEASE = 570.25.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog
index 3afbd0aa6..1e0c75bbf 100644
--- a/SOURCES/kernel.changelog
+++ b/SOURCES/kernel.changelog
@@ -1,3 +1,13 @@
+* Sat Jun 28 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.25.1.el9_6]
+- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99124] {CVE-2022-49846}
+- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97110] {CVE-2025-37799}
+- NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-95252]
+- ipv6: mcast: extend RCU protection in igmp6_send() (CKI Backport Bot) [RHEL-94673] {CVE-2025-21759}
+- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93445] {CVE-2025-21887}
+- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93132] {CVE-2025-22004}
+- block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-92268]
+Resolves: RHEL-92268, RHEL-93132, RHEL-93445, RHEL-94673, RHEL-95252, RHEL-97110, RHEL-99124
+
 * Sat Jun 21 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.24.1.el9_6]
 - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93465] {CVE-2023-52933}
 - net/mlx5: Fill out devlink dev info only for PFs (CKI Backport Bot) [RHEL-93770]
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index baafc7558..afbe88c2b 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 570.24.1
+%define pkgrelease 570.25.1
 %define kversion 5
-%define tarfile_release 5.14.0-570.24.1.el9_6
+%define tarfile_release 5.14.0-570.25.1.el9_6
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 570.24.1%{?buildid}%{?dist}
+%define specrelease 570.25.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-570.24.1.el9_6
+%define kabiversion 5.14.0-570.25.1.el9_6
 
 #
 # End of genspec.sh variables
@@ -3784,6 +3784,15 @@ fi
 #
 #
 %changelog
+* Sat Jun 28 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-570.25.1.el9_6]
+- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99124] {CVE-2022-49846}
+- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97110] {CVE-2025-37799}
+- NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-95252]
+- ipv6: mcast: extend RCU protection in igmp6_send() (CKI Backport Bot) [RHEL-94673] {CVE-2025-21759}
+- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (CKI Backport Bot) [RHEL-93445] {CVE-2025-21887}
+- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93132] {CVE-2025-22004}
+- block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-92268]
+
 * Sat Jun 21 2025 Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.24.1.el9_6]
 - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93465] {CVE-2023-52933}
 - net/mlx5: Fill out devlink dev info only for PFs (CKI Backport Bot) [RHEL-93770]