diff --git a/config/i386/pae b/config/i386/pae
index bb44902..ef0927c 100644
--- a/config/i386/pae
+++ b/config/i386/pae
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/i386 6.9.0-rc1 Kernel Configuration
+# Linux/i386 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
@@ -955,6 +955,7 @@ CONFIG_ASM_MODVERSIONS=y
 CONFIG_MODULE_SRCVERSION_ALL=y
 # CONFIG_MODULE_SIG is not set
 # CONFIG_MODULE_SIG_ALL is not set
+# CONFIG_MODULE_SIG_SHA1 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
@@ -2225,7 +2226,6 @@ CONFIG_CXL_PORT=m
 CONFIG_CXL_SUSPEND=y
 CONFIG_CXL_REGION=y
 # CONFIG_CXL_REGION_INVALIDATION_TEST is not set
-CONFIG_CXL_PMU=m
 CONFIG_PCCARD=m
 CONFIG_PCMCIA=m
 CONFIG_PCMCIA_LOAD_CIS=y
@@ -10140,6 +10140,7 @@ CONFIG_DTPM_DEVFREQ=y
 # Performance monitor support
 #
 CONFIG_DWC_PCIE_PMU=m
+CONFIG_CXL_PMU=m
 # end of Performance monitor support
 
 CONFIG_RAS=y
diff --git a/config/ppc64le/default b/config/ppc64le/default
index 14115c8..4250467 100644
--- a/config/ppc64le/default
+++ b/config/ppc64le/default
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/powerpc 6.9.0-rc1 Kernel Configuration
+# Linux/powerpc 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
@@ -728,6 +728,7 @@ CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_SIG=y
 # CONFIG_MODULE_SIG_FORCE is not set
 # CONFIG_MODULE_SIG_ALL is not set
+# CONFIG_MODULE_SIG_SHA1 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
@@ -1941,7 +1942,6 @@ CONFIG_CXL_PORT=m
 CONFIG_CXL_SUSPEND=y
 CONFIG_CXL_REGION=y
 # CONFIG_CXL_REGION_INVALIDATION_TEST is not set
-CONFIG_CXL_PMU=m
 # CONFIG_PCCARD is not set
 CONFIG_RAPIDIO=y
 CONFIG_RAPIDIO_TSI721=m
@@ -7695,6 +7695,7 @@ CONFIG_PHY_QCOM_USB_HS=m
 # Performance monitor support
 #
 CONFIG_DWC_PCIE_PMU=m
+CONFIG_CXL_PMU=m
 # end of Performance monitor support
 
 CONFIG_RAS=y
diff --git a/config/riscv64/default b/config/riscv64/default
index a86d5b1..b16920c 100644
--- a/config/riscv64/default
+++ b/config/riscv64/default
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/riscv 6.9.0-rc1 Kernel Configuration
+# Linux/riscv 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
@@ -716,6 +716,7 @@ CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_SIG=y
 # CONFIG_MODULE_SIG_FORCE is not set
 # CONFIG_MODULE_SIG_ALL is not set
+# CONFIG_MODULE_SIG_SHA1 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
@@ -2020,7 +2021,6 @@ CONFIG_CXL_PORT=m
 CONFIG_CXL_SUSPEND=y
 CONFIG_CXL_REGION=y
 # CONFIG_CXL_REGION_INVALIDATION_TEST is not set
-CONFIG_CXL_PMU=m
 CONFIG_PCCARD=m
 CONFIG_PCMCIA=m
 CONFIG_PCMCIA_LOAD_CIS=y
@@ -9474,6 +9474,7 @@ CONFIG_RISCV_PMU_SBI=y
 CONFIG_STARFIVE_STARLINK_PMU=y
 CONFIG_ANDES_CUSTOM_PMU=y
 CONFIG_DWC_PCIE_PMU=m
+CONFIG_CXL_PMU=m
 # end of Performance monitor support
 
 CONFIG_RAS=y
diff --git a/config/s390x/default b/config/s390x/default
index 5315a07..932afd2 100644
--- a/config/s390x/default
+++ b/config/s390x/default
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/s390 6.9.0-rc1 Kernel Configuration
+# Linux/s390 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
@@ -566,6 +566,7 @@ CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_SIG=y
 # CONFIG_MODULE_SIG_FORCE is not set
 # CONFIG_MODULE_SIG_ALL is not set
+# CONFIG_MODULE_SIG_SHA1 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
@@ -1676,7 +1677,6 @@ CONFIG_CXL_MEM=m
 CONFIG_CXL_PORT=m
 CONFIG_CXL_REGION=y
 # CONFIG_CXL_REGION_INVALIDATION_TEST is not set
-CONFIG_CXL_PMU=m
 # CONFIG_PCCARD is not set
 CONFIG_RAPIDIO=m
 CONFIG_RAPIDIO_DISC_TIMEOUT=30
@@ -3744,6 +3744,7 @@ CONFIG_BCM_KONA_USB2_PHY=m
 # Performance monitor support
 #
 CONFIG_DWC_PCIE_PMU=m
+CONFIG_CXL_PMU=m
 # end of Performance monitor support
 
 CONFIG_RAS=y
diff --git a/config/s390x/zfcpdump b/config/s390x/zfcpdump
index e199ccf..eb0ac0b 100644
--- a/config/s390x/zfcpdump
+++ b/config/s390x/zfcpdump
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/s390 6.9.0-rc1 Kernel Configuration
+# Linux/s390 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
diff --git a/config/x86_64/default b/config/x86_64/default
index aa5d569..246b1f3 100644
--- a/config/x86_64/default
+++ b/config/x86_64/default
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 6.9.0-rc1 Kernel Configuration
+# Linux/x86_64 6.9.0-rc2 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (scripts/dummy-tools/gcc)"
 CONFIG_CC_IS_GCC=y
@@ -998,6 +998,7 @@ CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_SIG=y
 # CONFIG_MODULE_SIG_FORCE is not set
 # CONFIG_MODULE_SIG_ALL is not set
+# CONFIG_MODULE_SIG_SHA1 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
@@ -2322,7 +2323,6 @@ CONFIG_CXL_PORT=m
 CONFIG_CXL_SUSPEND=y
 CONFIG_CXL_REGION=y
 # CONFIG_CXL_REGION_INVALIDATION_TEST is not set
-CONFIG_CXL_PMU=m
 CONFIG_PCCARD=m
 CONFIG_PCMCIA=m
 CONFIG_PCMCIA_LOAD_CIS=y
@@ -10077,6 +10077,7 @@ CONFIG_IDLE_INJECT=y
 # Performance monitor support
 #
 CONFIG_DWC_PCIE_PMU=m
+CONFIG_CXL_PMU=m
 # end of Performance monitor support
 
 CONFIG_RAS=y
diff --git a/patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch b/patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch
index faca2ef..464fae9 100644
--- a/patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch
+++ b/patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch
@@ -21,7 +21,7 @@ Acked-by: Lee, Chun-Yi <jlee@suse.com>
 
 --- a/arch/x86/kernel/setup.c
 +++ b/arch/x86/kernel/setup.c
-@@ -25,6 +25,7 @@
+@@ -24,6 +24,7 @@
  #include <linux/static_call.h>
  #include <linux/swiotlb.h>
  #include <linux/random.h>
@@ -29,7 +29,7 @@ Acked-by: Lee, Chun-Yi <jlee@suse.com>
  
  #include <uapi/linux/mount.h>
  
-@@ -1031,6 +1032,13 @@ void __init setup_arch(char **cmdline_p)
+@@ -900,6 +901,13 @@ void __init setup_arch(char **cmdline_p)
  	if (efi_enabled(EFI_BOOT))
  		efi_init();
  
@@ -41,7 +41,7 @@ Acked-by: Lee, Chun-Yi <jlee@suse.com>
 +#endif
 +
  	reserve_ibft_region();
- 	dmi_setup();
+ 	x86_init.resources.dmi_setup();
  
 --- a/security/lockdown/Kconfig
 +++ b/security/lockdown/Kconfig
diff --git a/rpm/config.sh b/rpm/config.sh
index f268d3b..e426779 100644
--- a/rpm/config.sh
+++ b/rpm/config.sh
@@ -1,5 +1,5 @@
 # The version of the main tarball to use
-SRCVERSION=6.9-rc1
+SRCVERSION=6.9-rc2
 # variant of the kernel-source package, either empty or "-rt"
 VARIANT=
 # enable kernel module compression