diff --git a/.kernel.metadata b/.kernel.metadata
index a458c56dea68f95c13ead6fb3c41473ffd7940cb..d3d3db8f67ced5136b2a930799f71918fd36ff1e 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,3 +1,3 @@
-024b4b4c57413c7d2ed11e51f7f96a19f7dd1061f8417059ba39b2a1daed3803 SOURCES/kernel-abi-stablelists-6.12.0-67.el10.tar.xz
-b6876512800e2b776d02c7fde5add55a244099303fe394077ba6a99c1f9d3065 SOURCES/kernel-kabi-dw-6.12.0-67.el10.tar.xz
-7e2c70ec11de34ababda7b3ef2c536215ffd395782081d6df67b9e8e4126b6be SOURCES/linux-6.12.0-67.el10.tar.xz
+c57c9d062d923182ccd1f1e535599c7a255c955946a890a1523e13648f547b81 SOURCES/kernel-abi-stablelists-6.12.0-68.el10.tar.xz
+b6876512800e2b776d02c7fde5add55a244099303fe394077ba6a99c1f9d3065 SOURCES/kernel-kabi-dw-6.12.0-68.el10.tar.xz
+1d5d01865bf5bb2cf2cf321a32d642d0739335d35135940bae22664db6986ad0 SOURCES/linux-6.12.0-68.el10.tar.xz
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 11b3068d445810097a7e4e401456594e8ee381d9..d2a347d9ac6ca947a2bb7463ec2de9bb31efa4a6 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 1
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 67
+RHEL_RELEASE = 68
 
 #
 # RHEL_REBASE_NUM
diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog
index 784aa9d13cce298e32b9f8b20f2b5b8ec1d1b6d8..e15bcf9117dba4cc5c370512d6514e88bf1a34ad 100644
--- a/SOURCES/kernel.changelog
+++ b/SOURCES/kernel.changelog
@@ -1,3 +1,30 @@
+* Mon Mar 24 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-68.el10]
+- platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (Steve Best) [RHEL-79463]
+- platform/x86: intel/pmc: Fix ioremap() of bad address (Steve Best) [RHEL-79463]
+- x86/tsc: Move away from TSC leaf magic numbers (Steve Best) [RHEL-79463]
+- x86/cpu: Move TSC CPUID leaf definition (Steve Best) [RHEL-79463]
+- vrf: use RCU protection in l3mdev_l3_out() (Guillaume Nault) [RHEL-81545] {CVE-2025-21791}
+- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-83836]
+- async_xor: Remove unused 'async_xor_val' (Nigel Croxon) [RHEL-83951]
+- md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Nigel Croxon) [RHEL-83951]
+- md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Nigel Croxon) [RHEL-83951]
+- md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83951]
+- md/raid5: merge reshape_progress checking inside get_reshape_loc() (Nigel Croxon) [RHEL-83951]
+- md: fix mddev uaf while iterating all_mddevs list (Nigel Croxon) [RHEL-83951]
+- md: switch md-cluster to use md_submodle_head (Nigel Croxon) [RHEL-83951]
+- md: switch personalities to use md_submodule_head (Nigel Croxon) [RHEL-83951]
+- md: don't export md_cluster_ops (Nigel Croxon) [RHEL-83951]
+- md/md-cluster: cleanup md_cluster_ops reference (Nigel Croxon) [RHEL-83951]
+- md: introduce struct md_submodule_head and APIs (Nigel Croxon) [RHEL-83951]
+- md: only include md-cluster.h if necessary (Nigel Croxon) [RHEL-83951]
+- md: merge common code into find_pers() (Nigel Croxon) [RHEL-83951]
+- md/raid1: fix memory leak in raid1_run() if no active rdev (Nigel Croxon) [RHEL-83951]
+- md: ensure resync is prioritized over recovery (Nigel Croxon) [RHEL-83951]
+- tpm: Change to kvalloc() in eventlog/acpi.c (CKI Backport Bot) [RHEL-81492] {CVE-2024-58005}
+- dpll: add clock quality level attribute and op (Petr Oros) [RHEL-77874]
+- i2c: i801: Add support for Intel Panther Lake (Steve Best) [RHEL-47425]
+Resolves: RHEL-47425, RHEL-77874, RHEL-79463, RHEL-81492, RHEL-81545, RHEL-83836, RHEL-83951
+
 * Fri Mar 21 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-67.el10]
 - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CKI Backport Bot) [RHEL-81378] {CVE-2024-57988}
 - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CKI Backport Bot) [RHEL-81510] {CVE-2024-58013}
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index f803f5b49ec6ebbfff997e4ea11c9d25878e1744..f6cd6c643585948a6cb456126b0df20beadcdf01 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -162,15 +162,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 67
+%define pkgrelease 68
 %define kversion 6
-%define tarfile_release 6.12.0-67.el10
+%define tarfile_release 6.12.0-68.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 67%{?buildid}%{?dist}
+%define specrelease 68%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-67.el10
+%define kabiversion 6.12.0-68.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -4314,11 +4314,37 @@ fi\
 #
 #
 %changelog
-* Mon Mar 24 2025 Release Engineering <releng@rockylinux.org> - 6.12.0-67
+* Sat Mar 29 2025 Release Engineering <releng@rockylinux.org> - 6.12.0-68
 - Porting to Rocky Linux 10, debranding and Rocky Linux branding
 - Add partial riscv64 support for build root
 - Provide basic VisionFive 2 support
 
+* Mon Mar 24 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-68.el10]
+- platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (Steve Best) [RHEL-79463]
+- platform/x86: intel/pmc: Fix ioremap() of bad address (Steve Best) [RHEL-79463]
+- x86/tsc: Move away from TSC leaf magic numbers (Steve Best) [RHEL-79463]
+- x86/cpu: Move TSC CPUID leaf definition (Steve Best) [RHEL-79463]
+- vrf: use RCU protection in l3mdev_l3_out() (Guillaume Nault) [RHEL-81545] {CVE-2025-21791}
+- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-83836]
+- async_xor: Remove unused 'async_xor_val' (Nigel Croxon) [RHEL-83951]
+- md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Nigel Croxon) [RHEL-83951]
+- md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Nigel Croxon) [RHEL-83951]
+- md/raid1,raid10: don't ignore IO flags (Nigel Croxon) [RHEL-83951]
+- md/raid5: merge reshape_progress checking inside get_reshape_loc() (Nigel Croxon) [RHEL-83951]
+- md: fix mddev uaf while iterating all_mddevs list (Nigel Croxon) [RHEL-83951]
+- md: switch md-cluster to use md_submodle_head (Nigel Croxon) [RHEL-83951]
+- md: switch personalities to use md_submodule_head (Nigel Croxon) [RHEL-83951]
+- md: don't export md_cluster_ops (Nigel Croxon) [RHEL-83951]
+- md/md-cluster: cleanup md_cluster_ops reference (Nigel Croxon) [RHEL-83951]
+- md: introduce struct md_submodule_head and APIs (Nigel Croxon) [RHEL-83951]
+- md: only include md-cluster.h if necessary (Nigel Croxon) [RHEL-83951]
+- md: merge common code into find_pers() (Nigel Croxon) [RHEL-83951]
+- md/raid1: fix memory leak in raid1_run() if no active rdev (Nigel Croxon) [RHEL-83951]
+- md: ensure resync is prioritized over recovery (Nigel Croxon) [RHEL-83951]
+- tpm: Change to kvalloc() in eventlog/acpi.c (CKI Backport Bot) [RHEL-81492] {CVE-2024-58005}
+- dpll: add clock quality level attribute and op (Petr Oros) [RHEL-77874]
+- i2c: i801: Add support for Intel Panther Lake (Steve Best) [RHEL-47425]
+
 * Fri Mar 21 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-67.el10]
 - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CKI Backport Bot) [RHEL-81378] {CVE-2024-57988}
 - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CKI Backport Bot) [RHEL-81510] {CVE-2024-58013}