diff --git a/.kernel.checksum b/.kernel.checksum
index a8e306e6668480ebf286a97e81f0a532c6423ee6..b60ef74c3f980c16dddf837412cba69073d2d4ca 100644
--- a/.kernel.checksum
+++ b/.kernel.checksum
@@ -1 +1 @@
-915b1ef0547f02947ad4e19eadb782268631562fc2da4dd8ef5898ff4d61cdab
+fe1a62237d3477b35fcda2aca6753f2c785e7bf17aa2c8d5fc2b43a80032767e
diff --git a/.kernel.metadata b/.kernel.metadata
index 805ccee907aad3a9a57eb8ce780bf1ac4a366ff2..6b266897e9448c5b172f01de93eb6ef1a46448ee 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,3 +1,3 @@
-79863eb8a259d13c21edb66b6e876e484c5e3fe3966619b691127ca800288d21 SOURCES/kernel-abi-stablelists-5.14.0-503.33.1.el9_5.tar.bz2
-6021f9cab78cb555ea7f953f20d9cfa674fec22e7f18b24accd523474cb25c1a SOURCES/kernel-kabi-dw-5.14.0-503.33.1.el9_5.tar.bz2
-d86bcfd9422e5477ce4aa5bcb2b4caf23b0f1acfbcad0b90d4cdb5f1c8a09a4c SOURCES/linux-5.14.0-503.33.1.el9_5.tar.xz
+055d24b67e0649df1d4893fdd8da684f95b4e2a475eb3bb014869fb8075519a4 SOURCES/kernel-abi-stablelists-5.14.0-503.34.1.el9_5.tar.bz2
+79e5ccb24e0f4a2827a5f5a547a28ded25fcbeeab83879b82cb5c6c9145adb85 SOURCES/kernel-kabi-dw-5.14.0-503.34.1.el9_5.tar.bz2
+4e0030c90b945893498d7c234b32d71b41a1f9b947ac62ae7ef79ad85f65e7b3 SOURCES/linux-5.14.0-503.34.1.el9_5.tar.xz
diff --git a/SOURCES/Makefile.rhelver b/SOURCES/Makefile.rhelver
index bbb981fc25d49512ffbf25b60ee292e39a311b24..1409df75f6dfc9c3d5c8d0d959974649a9c90a19 100644
--- a/SOURCES/Makefile.rhelver
+++ b/SOURCES/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 5
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 503.33.1
+RHEL_RELEASE = 503.34.1
 
 #
 # ZSTREAM
diff --git a/SOURCES/kernel.changelog b/SOURCES/kernel.changelog
index d1a378deace26b06e0cd34b82984a9938c367b87..39c5cbe567708a2cfdf408b597fd407356bfd431 100644
--- a/SOURCES/kernel.changelog
+++ b/SOURCES/kernel.changelog
@@ -1,3 +1,8 @@
+* Mon Mar 17 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
+- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
+- crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]
+Resolves: RHEL-70643, RHEL-82734
+
 * Wed Mar 12 2025 Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
 - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
 - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 53d3137bb808683a99d8644f4db0df13c52098ef..ac66354abde8752de28df7322530fd1f95fe8852 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -165,15 +165,15 @@ Summary: The Linux kernel
 # define buildid .local
 %define specversion 5.14.0
 %define patchversion 5.14
-%define pkgrelease 503.33.1
+%define pkgrelease 503.34.1
 %define kversion 5
-%define tarfile_release 5.14.0-503.33.1.el9_5
+%define tarfile_release 5.14.0-503.34.1.el9_5
 # This is needed to do merge window version magic
 %define patchlevel 14
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 503.33.1%{?buildid}%{?dist}
+%define specrelease 503.34.1%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 5.14.0-503.33.1.el9_5
+%define kabiversion 5.14.0-503.34.1.el9_5
 
 #
 # End of genspec.sh variables
@@ -3794,10 +3794,14 @@ fi
 #
 #
 %changelog
-* Wed Mar 19 2025 Release Engineering <releng@rockylinux.org> - 5.14.0-503.33.1
+* Wed Mar 26 2025 Release Engineering <releng@rockylinux.org> - 5.14.0-503.34.1
 - Porting to Rocky Linux 9, debranding and Rocky branding
 - Ensure aarch64 kernel is not compressed
 
+* Mon Mar 17 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
+- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
+- crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]
+
 * Wed Mar 12 2025 Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
 - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
 - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]