diff --git a/kernel.spec b/kernel.spec
index e96255c03..df18124b1 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -12,7 +12,7 @@
 # change below to w4T.xzdio):
 %define _binary_payload w3T.xzdio
 
-%global distro_build 514
+%global distro_build 515
 
 # Sign the x86_64 kernel for secure boot authentication
 %ifarch x86_64 aarch64 s390x ppc64le
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 514.el8
+%define pkgrelease 515.el8
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 514%{?dist}
+%define specrelease 515%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2695,6 +2695,39 @@ fi
 #
 #
 %changelog
+* Sun Sep 24 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-515.el8]
+- s390/dasd: fix hanging device after quiesce/resume (Tobias Huschle) [RHEL-2838]
+- s390/dasd: fix hanging device after request requeue (Tobias Huschle) [RHEL-2830]
+- s390/dasd: fix command reject error on ESE devices (Tobias Huschle) [RHEL-2850]
+- s390/dasd: print copy pair message only for the correct error (Tobias Huschle) [RHEL-2831]
+- s390: add z16 elf platform (Tobias Huschle) [RHEL-2854]
+- s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Tobias Huschle) [RHEL-2410]
+- powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Mamatha Inamdar) [2227601]
+- arm64: kdump: Remove custom linux,usable-memory-range handling (Baoquan He) [RHEL-2307]
+- arm64: kdump: Remove custom linux,elfcorehdr handling (Baoquan He) [RHEL-2307]
+- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Dean Nelson) [RHEL-1784] {CVE-2022-45919}
+- media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Dean Nelson) [RHEL-1841] {CVE-2022-45884}
+- media: dvb-core: Fix use-after-free due on race condition at dvb_net (Dean Nelson) [RHEL-1842] {CVE-2022-45886}
+- media: dvb_ca_en50221: fix a size write bug (Dean Nelson) [RHEL-1784]
+- media: dvbdev: fix refcnt bug (Dean Nelson) [RHEL-1841]
+- media: dvbdev: adopts refcnt to avoid UAF (Dean Nelson) [RHEL-1841]
+- media: dvbdev: fix error logic at dvb_register_device() (Dean Nelson) [RHEL-1841]
+- media: dvb_net: avoid speculation from net slot (Dean Nelson) [RHEL-1842]
+- media: dvb_ca_en50221: avoid speculation from CA slot (Dean Nelson) [RHEL-1784]
+- media: dvbdev: Fix memleak in dvb_register_device (Dean Nelson) [RHEL-1841]
+- media: media/dvb: Use kmemdup rather than duplicating its implementation (Dean Nelson) [RHEL-1841]
+- media: dvbdev: remove double-unlock (Dean Nelson) [RHEL-1841]
+- media: dvb-core: fix epoll() by calling poll_wait first (Dean Nelson) [RHEL-1784]
+- media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl() (Dean Nelson) [RHEL-1784]
+- drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttilä) [2231934]
+- gfs2: conversion deadlock do_promote bypass (Bob Peterson) [2225228]
+- gfs2: do_promote cleanup (Andreas Gruenbacher) [2225228]
+- gfs2: Make use of list_is_first (Andreas Gruenbacher) [2225228]
+- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227916]
+- Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227916]
+- x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227916]
+- fs: don't audit the capability check in simple_xattr_list() (Andrey Albershteyn) [RHEL-863]
+
 * Tue Sep 19 2023 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-514.el8]
 - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)
 - redhat: add additional gating boot tests (Denys Vlasenko)
diff --git a/sources b/sources
index 65a4d0b2c..0e555bf36 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-514.el8.tar.xz) = 5aaff95102f308a30febeeaa8f316a7ecd87319a701af4aa8c15f26a7d115c829edcf0778a20040ee398bdf1566e5c39f318addcdd844caa6b6d493ccb9d022e
-SHA512 (kernel-abi-stablelists-4.18.0-514.tar.bz2) = 3f2b71886b8e6178834946227730709f61b8fca3a7a8b14d7da315724c91b4fad1f8e04f44124e0251500e2027ced805c9b0452efeb4ecd5d5c73a9673cac332
-SHA512 (kernel-kabi-dw-4.18.0-514.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32
+SHA512 (linux-4.18.0-515.el8.tar.xz) = 63b464af5160d32e74f178762ba450408f9b1f13ae105b9abdf6c6bcdbe827056e95f96ed86422bc121953cc47c879c1f683dd88b15f2a1cb6760e0a5099ed25
+SHA512 (kernel-abi-stablelists-4.18.0-515.tar.bz2) = 764f55ab343ddca9034c0173bdecd9551416c093c8c0cd173e35719384833a67e9d6b1b19e774a7983cb8702292bb7eb808b22196e2dab4b21add5155eff83c3
+SHA512 (kernel-kabi-dw-4.18.0-515.tar.bz2) = f7bbf94096acc33486535d9eece268c543c6a05d93ee262d64dc22b220f1cb3ff49b4cf091a5c748811c4229fdf674be4c816174575161b0ca5e457726595b32