diff --git a/.kernel.checksum b/.kernel.checksum
index 000ea66e65f3b86ef503d199383929a63556ca9e..745e02231d53b93a8f6338ff18cff93190df63b9 100644
--- a/.kernel.checksum
+++ b/.kernel.checksum
@@ -1 +1 @@
-16a74e5105561952bf361cff7a04ac0aaff32c8a07b816f0517a341f5a1dab20
+4d34484b237e0385e094fe6aca398d81c474cbc70548a9925061fa10aedf32f3
diff --git a/.kernel.metadata b/.kernel.metadata
index 534823c1907e01898b11eaf7aa586be8f46342a7..c93995839f290a016383f5a433e25386f4e54efe 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,6 +1,6 @@
-7afada92e5b38d4876693dff8599e34d213de9f13d5d55d082f160497b0aa658 SOURCES/kernel-abi-stablelists-5.14.0-427.18.1.el9_4.tar.bz2
-decd5601c448d4e6cdb0e0ee5d0d24994d09b3a694fc768f1f6c13f1a3eacd6f SOURCES/kernel-kabi-dw-5.14.0-427.18.1.el9_4.tar.bz2
-87d95328bbadea0b4bdd56d1bfa1c836474312ec2317cf568e428ac6cd0672f7 SOURCES/linux-5.14.0-427.18.1.el9_4.tar.xz
+7b24506abfd051c57b77854153237b6ae59b2407f0fd3019e776890e68b62cbc SOURCES/kernel-abi-stablelists-5.14.0-427.20.1.el9_4.tar.bz2
+171aa6eb86336f4b21b049949a8d4b2f5509b1e22ad981fa19c2e2b63e19b7ac SOURCES/kernel-kabi-dw-5.14.0-427.20.1.el9_4.tar.bz2
+f242ac6b9dd7f7101634e17f6572f214d05ea07fb77f9795619eb25f499dff2a SOURCES/linux-5.14.0-427.20.1.el9_4.tar.xz
ca3aa0979f9426736d382747bba165e71ea4c42a2fb736d78fd8a4c4b7b58ad4 SOURCES/nvidiagpuoot001.x509
af61197112f29a3a52f3825d363fe3103dc98cad269763071ee86eb2aedc139b SOURCES/rheldup3.x509
b466265282193c17b3256b199ecc3bdd986797b4a82ad841de4a132132e9f6ab SOURCES/rhelima.x509
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index 603e47da1963cd742b2e9b2ea36153771d7d3fed..473b518e8bed46c32a0b7a832b5edd0a1854ee15 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 4
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
-RHEL_RELEASE = 427.18.1
+RHEL_RELEASE = 427.20.1
#
# ZSTREAM
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index ebd66dc352ef245aa042de586894f6957246a3a9..cf2dddf915eac7c6e2dfba83eea9ed8064559f72 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
-%define pkgrelease 427.18.1
+%define pkgrelease 427.20.1
%define kversion 5
-%define tarfile_release 5.14.0-427.18.1.el9_4
+%define tarfile_release 5.14.0-427.20.1.el9_4
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 427.18.1%{?buildid}%{?dist}
+%define specrelease 427.20.1%{?buildid}%{?dist}
# This defines the kabi tarball version
-%define kabiversion 5.14.0-427.18.1.el9_4
+%define kabiversion 5.14.0-427.20.1.el9_4
#
# End of genspec.sh variables
@@ -2439,7 +2439,6 @@ BuildKernel() {
SBATsuffix="rhel"
%endif
SBAT=$(cat <<- EOF
- linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
linux,1,RESF,linux,$KernelVer,mailto:security@rockylinux.org
linux.$SBATsuffix,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
linux.rocky,1,RESF,linux,$KernelVer,mailto:security@rockylinux.org
@@ -3732,9 +3731,22 @@ fi
#
#
%changelog
-* Thu May 23 2024 Release Engineering <releng@rockylinux.org> - 5.14.0-427.18.1
+* Wed Jun 05 2024 Release Engineering <releng@rockylinux.org> - 5.14.0-427.20.1
- Porting to 9.4, debranding and Rocky branding
+* Thu May 23 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.20.1.el9_4]
+- ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
+- idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
+- idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
+- PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
+- cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]
+
+* Mon May 20 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.19.1.el9_4]
+- x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
+- x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
+- x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
+- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}
+
* Mon May 13 2024 Scott Weaver <scweaver@redhat.com> [5.14.0-427.18.1.el9_4]
- netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32971 RHEL-30082] {CVE-2024-26642}
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-33070 RHEL-30078] {CVE-2024-26643}