diff --git a/dtb-aarch64.changes b/dtb-aarch64.changes
index 4ff14802..19079c3b 100644
--- a/dtb-aarch64.changes
+++ b/dtb-aarch64.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/dtb-aarch64.spec b/dtb-aarch64.spec
index 7a751dc8..e52eaa3b 100644
--- a/dtb-aarch64.spec
+++ b/dtb-aarch64.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-aarch64
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/dtb-armv6l.changes b/dtb-armv6l.changes
index 4ff14802..19079c3b 100644
--- a/dtb-armv6l.changes
+++ b/dtb-armv6l.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/dtb-armv6l.spec b/dtb-armv6l.spec
index 23fdf754..28553a71 100644
--- a/dtb-armv6l.spec
+++ b/dtb-armv6l.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-armv6l
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/dtb-armv7l.changes b/dtb-armv7l.changes
index 4ff14802..19079c3b 100644
--- a/dtb-armv7l.changes
+++ b/dtb-armv7l.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/dtb-armv7l.spec b/dtb-armv7l.spec
index 54720788..71485b54 100644
--- a/dtb-armv7l.spec
+++ b/dtb-armv7l.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-armv7l
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/dtb-riscv64.changes b/dtb-riscv64.changes
index 4ff14802..19079c3b 100644
--- a/dtb-riscv64.changes
+++ b/dtb-riscv64.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/dtb-riscv64.spec b/dtb-riscv64.spec
index 8891247f..7b25ffb1 100644
--- a/dtb-riscv64.spec
+++ b/dtb-riscv64.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -29,9 +29,9 @@
 %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,mkspec,compute-PATCHVERSION.sh,arch-symbols,log.sh,try-disable-staging-driver,compress-vmlinux.sh,mkspec-dtb,check-module-license,klp-symbols,splitflist,mergedep,moddep,modflist,kernel-subpackage-build})
 
 Name:           dtb-riscv64
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/kernel-64kb.changes b/kernel-64kb.changes
index 4ff14802..19079c3b 100644
--- a/kernel-64kb.changes
+++ b/kernel-64kb.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-64kb.spec b/kernel-64kb.spec
index d1b6c599..f93042ce 100644
--- a/kernel-64kb.spec
+++ b/kernel-64kb.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-64kb
 Summary:        Kernel with 64kb PAGE_SIZE
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-debug.changes b/kernel-debug.changes
index 4ff14802..19079c3b 100644
--- a/kernel-debug.changes
+++ b/kernel-debug.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-debug.spec b/kernel-debug.spec
index 9d1c8644..77c50c8e 100644
--- a/kernel-debug.spec
+++ b/kernel-debug.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-debug
 Summary:        A Debug Version of the Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %ifarch ppc64
 Provides:       kernel-kdump = 2.6.28
 Obsoletes:      kernel-kdump <= 2.6.28
diff --git a/kernel-default.changes b/kernel-default.changes
index 4ff14802..19079c3b 100644
--- a/kernel-default.changes
+++ b/kernel-default.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-default.spec b/kernel-default.spec
index ef421fa2..77a99d5c 100644
--- a/kernel-default.spec
+++ b/kernel-default.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-default
 Summary:        The Standard Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %ifarch %ix86
 Provides:       kernel-smp = 2.6.17
 Obsoletes:      kernel-smp <= 2.6.17
diff --git a/kernel-docs.changes b/kernel-docs.changes
index 4ff14802..19079c3b 100644
--- a/kernel-docs.changes
+++ b/kernel-docs.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-docs.spec b/kernel-docs.spec
index c079110b..357b17ab 100644
--- a/kernel-docs.spec
+++ b/kernel-docs.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -31,9 +31,9 @@ Name:           kernel-docs
 Summary:        Kernel Documentation
 License:        GPL-2.0-only
 Group:          Documentation/Man
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -67,7 +67,7 @@ BuildRequires:  texlive-zapfding
 %endif
 URL:            https://www.kernel.org/
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 BuildArch:      noarch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
diff --git a/kernel-kvmsmall.changes b/kernel-kvmsmall.changes
index 4ff14802..19079c3b 100644
--- a/kernel-kvmsmall.changes
+++ b/kernel-kvmsmall.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-kvmsmall.spec b/kernel-kvmsmall.spec
index 03cd8eb9..f0bbcbe1 100644
--- a/kernel-kvmsmall.spec
+++ b/kernel-kvmsmall.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-kvmsmall
 Summary:        The Small Developer Kernel for KVM
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-lpae.changes b/kernel-lpae.changes
index 4ff14802..19079c3b 100644
--- a/kernel-lpae.changes
+++ b/kernel-lpae.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-lpae.spec b/kernel-lpae.spec
index dae9346e..4bc56d00 100644
--- a/kernel-lpae.spec
+++ b/kernel-lpae.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-lpae
 Summary:        Kernel for LPAE enabled systems
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-obs-build.changes b/kernel-obs-build.changes
index 4ff14802..19079c3b 100644
--- a/kernel-obs-build.changes
+++ b/kernel-obs-build.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-obs-build.spec b/kernel-obs-build.spec
index 3f4e5cb2..84890f58 100644
--- a/kernel-obs-build.spec
+++ b/kernel-obs-build.spec
@@ -19,7 +19,7 @@
 
 #!BuildIgnore: post-build-checks
 
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -44,7 +44,7 @@ BuildRequires:  util-linux
 %endif
 %endif
 %endif
-BuildRequires:  kernel%kernel_flavor-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+BuildRequires:  kernel%kernel_flavor-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 
 %if 0%{?rhel_version}
 BuildRequires:  kernel
@@ -56,9 +56,9 @@ BuildRequires:  dracut
 Summary:        package kernel and initrd for OBS VM builds
 License:        GPL-2.0-only
 Group:          SLES
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/kernel-obs-qa.changes b/kernel-obs-qa.changes
index 4ff14802..19079c3b 100644
--- a/kernel-obs-qa.changes
+++ b/kernel-obs-qa.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-obs-qa.spec b/kernel-obs-qa.spec
index d35e385f..408b7560 100644
--- a/kernel-obs-qa.spec
+++ b/kernel-obs-qa.spec
@@ -17,7 +17,7 @@
 # needsrootforbuild
 
 
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -36,9 +36,9 @@ BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 Summary:        Basic QA tests for the kernel
 License:        GPL-2.0-only
 Group:          SLES
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
diff --git a/kernel-pae.changes b/kernel-pae.changes
index 4ff14802..19079c3b 100644
--- a/kernel-pae.changes
+++ b/kernel-pae.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-pae.spec b/kernel-pae.spec
index b1e2b49f..4c27cfc8 100644
--- a/kernel-pae.spec
+++ b/kernel-pae.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-pae
 Summary:        Kernel with PAE Support
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %ifarch %ix86
 Provides:       kernel-bigsmp = 2.6.17
 Obsoletes:      kernel-bigsmp <= 2.6.17
diff --git a/kernel-source.changes b/kernel-source.changes
index 4ff14802..19079c3b 100644
--- a/kernel-source.changes
+++ b/kernel-source.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-source.spec b/kernel-source.spec
index 46648a77..6388af78 100644
--- a/kernel-source.spec
+++ b/kernel-source.spec
@@ -17,7 +17,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 
 %include %_sourcedir/kernel-spec-macros
@@ -30,9 +30,9 @@
 %endif
 
 Name:           kernel-source
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -49,7 +49,7 @@ BuildRequires:  fdupes
 BuildRequires:  sed
 Requires(post): coreutils sed
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 Provides:       linux
 Provides:       multiversion(kernel)
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
diff --git a/kernel-syms.changes b/kernel-syms.changes
index 4ff14802..19079c3b 100644
--- a/kernel-syms.changes
+++ b/kernel-syms.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-syms.spec b/kernel-syms.spec
index f5436927..ea77a5d3 100644
--- a/kernel-syms.spec
+++ b/kernel-syms.spec
@@ -24,10 +24,10 @@ Name:           kernel-syms
 Summary:        Kernel Symbol Versions (modversions)
 License:        GPL-2.0-only
 Group:          Development/Sources
-Version:        6.3.0
+Version:        6.3.1
 %if %using_buildservice
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -52,7 +52,7 @@ Requires:       kernel-pae-devel = %version-%source_rel
 %endif
 Requires:       pesign-obs-integration
 Provides:       %name = %version-%source_rel
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 Provides:       multiversion(kernel)
 Source:         README.KSYMS
 Requires:       kernel-devel%variant = %version-%source_rel
diff --git a/kernel-vanilla.changes b/kernel-vanilla.changes
index 4ff14802..19079c3b 100644
--- a/kernel-vanilla.changes
+++ b/kernel-vanilla.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-vanilla.spec b/kernel-vanilla.spec
index c099524b..4e45e201 100644
--- a/kernel-vanilla.spec
+++ b/kernel-vanilla.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-vanilla
 Summary:        The Standard Kernel - without any SUSE patches
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/kernel-zfcpdump.changes b/kernel-zfcpdump.changes
index 4ff14802..19079c3b 100644
--- a/kernel-zfcpdump.changes
+++ b/kernel-zfcpdump.changes
@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Mon May  1 06:40:52 CEST 2023 - jslaby@suse.cz
+
+- Linux 6.3.1 (bsc#1012628).
+- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
+  (bsc#1012628).
+- fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds
+  (bsc#1012628).
+- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
+  (bsc#1012628).
+- fsverity: explicitly check for buffer overflow in
+  build_merkle_tree() (bsc#1012628).
+- gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU
+  (bsc#1012628).
+- bluetooth: Perform careful capability checks in hci_sock_ioctl()
+  (bsc#1012628).
+- wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628).
+- btrfs: fix uninitialized variable warnings (bsc#1012628).
+- USB: serial: option: add UNISOC vendor and TOZED LT70C product
+  (bsc#1012628).
+- driver core: Don't require dynamic_debug for initcall_debug
+  probe timing (bsc#1012628).
+- commit 4fd5b5c
+
 -------------------------------------------------------------------
 Fri Apr 28 07:32:02 CEST 2023 - jslaby@suse.cz
 
diff --git a/kernel-zfcpdump.spec b/kernel-zfcpdump.spec
index c2ffdf81..6224337b 100644
--- a/kernel-zfcpdump.spec
+++ b/kernel-zfcpdump.spec
@@ -18,7 +18,7 @@
 
 
 %define srcversion 6.3
-%define patchversion 6.3.0
+%define patchversion 6.3.1
 %define variant %{nil}
 %define compress_modules zstd
 %define compress_vmlinux xz
@@ -111,9 +111,9 @@ Name:           kernel-zfcpdump
 Summary:        The IBM System Z zfcpdump Kernel
 License:        GPL-2.0-only
 Group:          System/Kernel
-Version:        6.3.0
+Version:        6.3.1
 %if 0%{?is_kotd}
-Release:        <RELEASE>.g7ec9f8e
+Release:        <RELEASE>.gf5e439f
 %else
 Release:        0
 %endif
@@ -238,10 +238,10 @@ Conflicts:      hyper-v < 4
 Conflicts:      libc.so.6()(64bit)
 %endif
 Provides:       kernel = %version-%source_rel
-Provides:       kernel-%build_flavor-base-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
-Provides:       kernel-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       kernel-%build_flavor-base-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
+Provides:       kernel-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 # END COMMON DEPS
-Provides:       %name-srchash-7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+Provides:       %name-srchash-f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 %obsolete_rebuilds %name
 Source0:        https://www.kernel.org/pub/linux/kernel/v6.x/linux-%srcversion.tar.xz
 Source3:        kernel-source.rpmlintrc
diff --git a/patches.kernel.org.tar.bz2 b/patches.kernel.org.tar.bz2
index 3f8741cd..6e724797 100644
--- a/patches.kernel.org.tar.bz2
+++ b/patches.kernel.org.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ee18541c0eac40ab98a3cc2afffb20d24e6531f3cdbb7990b74d2deb7c88225b
-size 133
+oid sha256:f9a3a9989362bb67e40468e1a82760ce8cac0db70fe91172218b5781284b0246
+size 13183
diff --git a/patches.suse.tar.bz2 b/patches.suse.tar.bz2
index 67e92e4f..4d8a5192 100644
--- a/patches.suse.tar.bz2
+++ b/patches.suse.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:a51821bcf0fd8c968ab32806c4c8b77b36951f902c8e7592f59d423cc33e28aa
-size 34889
+oid sha256:85625538681931296d9e21541c3fdc61665679e2f83e865bb529d35811efc452
+size 34335
diff --git a/series.conf b/series.conf
index 1019c560..bcbd1170 100644
--- a/series.conf
+++ b/series.conf
@@ -27,6 +27,18 @@
 	# DO NOT MODIFY THEM!
 	# Send separate patches upstream if you find a problem...
 	########################################################
+	patches.kernel.org/6.3.1-001-wifi-brcmfmac-slab-out-of-bounds-read-in-brcmf_.patch
+	patches.kernel.org/6.3.1-002-fsverity-reject-FS_IOC_ENABLE_VERITY-on-mode-3-.patch
+	patches.kernel.org/6.3.1-003-drm-fb-helper-set-x-yres_virtual-in-drm_fb_help.patch
+	patches.kernel.org/6.3.1-004-fsverity-explicitly-check-for-buffer-overflow-i.patch
+	patches.kernel.org/6.3.1-005-gpiolib-acpi-Add-a-ignore-wakeup-quirk-for-Clev.patch
+	patches.kernel.org/6.3.1-006-bluetooth-Perform-careful-capability-checks-in-.patch
+	patches.kernel.org/6.3.1-007-wifi-brcmfmac-add-Cypress-43439-SDIO-ids.patch
+	patches.kernel.org/6.3.1-008-btrfs-fix-uninitialized-variable-warnings.patch
+	patches.kernel.org/6.3.1-009-mm-mremap-fix-vm_pgoff-in-vma_merge-case-3.patch
+	patches.kernel.org/6.3.1-010-USB-serial-option-add-UNISOC-vendor-and-TOZED-L.patch
+	patches.kernel.org/6.3.1-011-driver-core-Don-t-require-dynamic_debug-for-ini.patch
+	patches.kernel.org/6.3.1-012-Linux-6.3.1.patch
 
 	########################################################
 	# Build fixes that apply to the vanilla kernel too.
@@ -55,7 +67,6 @@
 	########################################################
 
 	patches.suse/ath11k-pci-Add-more-MODULE_FIRMWARE-entries.patch
-	patches.suse/0001-mm-mremap-fix-vm_pgoff-in-vma_merge-case-3.patch
 	########################################################
 	# end of sorted patches
 	########################################################
diff --git a/source-timestamp b/source-timestamp
index 9bdf8597..aabdfe6d 100644
--- a/source-timestamp
+++ b/source-timestamp
@@ -1,3 +1,3 @@
-2023-04-28 05:33:18 +0000
-GIT Revision: 7ec9f8e60b65c92487e30dc341ebdb0c36e6bcb2
+2023-05-01 04:42:03 +0000
+GIT Revision: f5e439ffac0e1a0275427a7d1d8a8a07e4a6eb39
 GIT Branch: stable