diff --git a/Makefile.rhelver b/Makefile.rhelver
index 30f8b67ff..66f4d64cf 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -41,4 +41,4 @@ AUTOMOTIVE_MINOR = 1
 # ---------------------------
 #
 # Set DERIVATIVE_STREAM to "yes" to enable derivative kernel versioning.
-DERIVATIVE_BUILD = 11
+DERIVATIVE_BUILD = 12
diff --git a/kernel.changelog b/kernel.changelog
index dfe5a6c22..ebf05fe5c 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,7 @@
+* Thu Jun 11 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-231.12.el10nv]
+- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Jan Stancek) [VOYAGER-1034] {CVE-2026-43037}
+Resolves: VOYAGER-1034
+
 * Mon Jun 08 2026 Oleksii Baranov <olebaran@redhat.com> [6.12.0-231.11.el10nv]
 - vfio/nvgrace-gpu: Add Blackwell-Next GPU readiness check via CXL DVSEC (Cédric Le Goater) [VOYAGER-417]
 - smb: client: reject userspace cifs.spnego descriptions (Jan Stancek) [VOYAGER-992] {CVE-2026-46243}
diff --git a/kernel.spec b/kernel.spec
index b2c5cd544..751bdca05 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -179,15 +179,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 231.11
+%define pkgrelease 231.12
 %define kversion 6
-%define tarfile_release 6.12.0-231.11.el10nv
+%define tarfile_release 6.12.0-231.12.el10nv
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 231.11%{?buildid}%{?dist}
+%define specrelease 231.12%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-231.11.el10nv
+%define kabiversion 6.12.0-231.12.el10nv
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4543,6 +4543,9 @@ fi\
 #
 #
 %changelog
+* Thu Jun 11 2026 Jan Stancek <jstancek@redhat.com> [6.12.0-231.12.el10nv]
+- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Jan Stancek) [VOYAGER-1034] {CVE-2026-43037}
+
 * Mon Jun 08 2026 Oleksii Baranov <olebaran@redhat.com> [6.12.0-231.11.el10nv]
 - vfio/nvgrace-gpu: Add Blackwell-Next GPU readiness check via CXL DVSEC (Cédric Le Goater) [VOYAGER-417]
 - smb: client: reject userspace cifs.spnego descriptions (Jan Stancek) [VOYAGER-992] {CVE-2026-46243}
diff --git a/sources b/sources
index 997737ff9..2bc88140c 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-6.12.0-231.11.el10nv.tar.xz) = d9b240a722d895be2c48d2f6e7169d2a234459c4c22595a3d14daa1c3b19ca93ca2c6e414f1bbb94e5736309fa4aa44e75cd9f0c7335639bee7982fd5d72ba4b
-SHA512 (kernel-abi-stablelists-6.12.0-231.11.el10nv.tar.xz) = eb752bbe67d88b6e7ddf97e3e9bec30e284b08c92bcbd04ddaf1bb97ca8ae5efc1b3d7e9f777d6b3466fc35a5874189cd42a2d3e638ecbb16e6eabc5176dc906
-SHA512 (kernel-kabi-dw-6.12.0-231.11.el10nv.tar.xz) = 3e2e986cbce7070576f5961ab732e285cea519b39b66e66b37b9113bdad605438cd496314e0cdd3528526e3050b3cf2a8f84c239c3d5af749ce7f7c5e640de5e
+SHA512 (linux-6.12.0-231.12.el10nv.tar.xz) = 3f724bdd31acb4e31cd907b0010afa838f6433e5c56a8baa727f42edaa75ffd8dc65b73a2bf600f2fd4cd41995b2bcb4309e42a97e7aa0e763fcc11a8685e2dc
+SHA512 (kernel-abi-stablelists-6.12.0-231.12.el10nv.tar.xz) = dd64e1f302f1c10dd5b6397bb21587c4af0db93a47e810e02ece9dc4daa23be19d11d7d3f1f16df57ca426de8d5c38c4116e90b244290aaac908eb21b0e80eff
+SHA512 (kernel-kabi-dw-6.12.0-231.12.el10nv.tar.xz) = 0badf7db454668e3f362cb1bfe84b1964fab6dc9bfc6e918277ccf86c9655f51e5010352cfeb04aa842a0ae5979fb87293d02fa55b084b853829af1a63dc4db3