diff --git a/Makefile.rhelver b/Makefile.rhelver
index 510ce1044..6f7d080b4 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 8
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 676
+RHEL_RELEASE = 677
 
 #
 # ZSTREAM
diff --git a/kernel.changelog b/kernel.changelog
index 5c818cf9d..993e452bb 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,14 @@
+* Fri Feb 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-677.el9]
+- nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-142602]
+- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-138489]
+- evm: Support multiple LSMs providing an xattr (Coiby Xu) [RHEL-140008]
+- evm: Align evm_inode_init_security() definition with LSM infrastructure (Coiby Xu) [RHEL-140008]
+- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-136438]
+- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-136438]
+- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-136438]
+- audit: fix out-of-bounds read in audit_compare_dname_path() (CKI Backport Bot) [RHEL-119177] {CVE-2025-39840}
+Resolves: RHEL-119177, RHEL-136438, RHEL-138489, RHEL-140008, RHEL-142602
+
 * Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
 - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
 - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
diff --git a/kernel.spec b/kernel.spec
index 4b2ea5aa1..124465396 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -176,15 +176,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 676
+%define pkgrelease 677
 %define kversion 5
-%define tarfile_release 5.14.0-676.el9
+%define tarfile_release 5.14.0-677.el9
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 676%{?buildid}%{?dist}
+%define specrelease 677%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-676.el9
+%define kabiversion 5.14.0-677.el9
 
 #
 # End of genspec.sh variables
@@ -3711,6 +3711,16 @@ fi
 #
 #
 %changelog
+* Fri Feb 06 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-677.el9]
+- nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-142602]
+- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-138489]
+- evm: Support multiple LSMs providing an xattr (Coiby Xu) [RHEL-140008]
+- evm: Align evm_inode_init_security() definition with LSM infrastructure (Coiby Xu) [RHEL-140008]
+- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-136438]
+- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-136438]
+- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-136438]
+- audit: fix out-of-bounds read in audit_compare_dname_path() (CKI Backport Bot) [RHEL-119177] {CVE-2025-39840}
+
 * Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
 - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
 - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
diff --git a/sources b/sources
index 898f86452..e0c4591b4 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-5.14.0-676.el9.tar.xz) = af6054c48861fbe9aea70ddce70264c26cfc7c3fb51e6c496bf8d0b738aa980ea1b933ec2bd8ecb0e1eac8e9bb04ae0f0dbc0ff4b16914832f68ca40ca8a6a82
-SHA512 (kernel-abi-stablelists-5.14.0-676.el9.tar.bz2) = 62cc4e9d57f055e87bc15aa471962c600a7c0c789a6a2d7ae7df7948119ca735d8fa1c6c967a36c5ad1c7dff7c6bd000db88d48666faefbd49275dd9c043f613
-SHA512 (kernel-kabi-dw-5.14.0-676.el9.tar.bz2) = 0a8d348a7d1692f589818a1602dce5e01157ca43862d7f09a72f2e434ba22877a55433109c974fe47cb1635b1e92346a333cc32ab79ff9bc3cc5d47eacdcb5da
+SHA512 (linux-5.14.0-677.el9.tar.xz) = f7e0bcfeb9c3a12e53fa0d4921cdfa12f0d685f0da679f1d67e6fca7a865f7bd21604cf264f3e133fd790aa427f813e7ab1fcec0c9d8b3dd68ae86504583cff4
+SHA512 (kernel-abi-stablelists-5.14.0-677.el9.tar.bz2) = d8f69fb3ce4d5df31ad58aadd0d5bb02ea96eff8b5377006ea42d94fc5d4df64cc038cf2455a35928337d1440e63fca8b33cf1d4f6d9b03dc5bc08e0d0a8771c
+SHA512 (kernel-kabi-dw-5.14.0-677.el9.tar.bz2) = 94ff325c1e7f4eeca7888010aadad6dbd9de401b7c674ca0bb71549768ad50937cf49142fa4bd58b0d156533749a3ec78139ac2d2e75d38b069f85cc36740140