diff --git a/core/linux-gru/PKGBUILD b/core/linux-gru/PKGBUILD
index b74ee263b..7a188067e 100644
--- a/core/linux-gru/PKGBUILD
+++ b/core/linux-gru/PKGBUILD
@@ -6,9 +6,9 @@ buildarch=8
 pkgbase=linux-gru
 _kernelname=${pkgbase#linux}
 _desc="Gru Chromebooks"
-pkgver=4.4.125
+pkgver=4.4.128
 pkgrel=1
-_commit=0c7b49dd59ec6a1ceec05643970a875fe5de23f2
+_commit=e09ba6372d19f5b95fbd3801a125aead648e6985
 arch=('aarch64')
 url="https://chromium.googlesource.com/chromiumos/third_party/kernel/+/chromeos-4.4"
 license=('GPL2')
@@ -22,11 +22,11 @@ source=("https://chromium.googlesource.com/chromiumos/third_party/kernel/+archiv
         'kernel.its'
         'kernel.keyblock'
         'kernel_data_key.vbprivk')
-md5sums=('a721dd1d088ba8241f58553d813598ed'
+md5sums=('06abf70c11785cc36234e0939a63c04c'
          'd3b3d9d59f91cc6fad24c29873ad87bc'
          '66cd7c64f8861025fa8e394675222aa1'
          '8f416793377fc69914851a32fe6ca33e'
-         '24cb6d01da3a1951ba4a6543fb2ac07c'
+         '5cafe3628454fee15a5dbb28bbfb26da'
          '51896870709e97c4f131e99c33ff115d'
          '61c5ff73c136ed07a7aadbf58db3d96a'
          '584777ae88bce2c5659960151b64c7d8')
diff --git a/core/linux-gru/config b/core/linux-gru/config
index 2ae28a288..b3c2d512c 100644
--- a/core/linux-gru/config
+++ b/core/linux-gru/config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.4.124-1 Kernel Configuration
+# Linux/arm64 4.4.128-1 Kernel Configuration
 #
 CONFIG_ARM64=y
 CONFIG_64BIT=y
@@ -457,6 +457,7 @@ CONFIG_LOW_MEM_NOTIFY=y
 CONFIG_SECCOMP=y
 # CONFIG_XEN is not set
 CONFIG_FORCE_MAX_ZONEORDER=11
+CONFIG_HARDEN_BRANCH_PREDICTOR=y
 CONFIG_ARMV8_DEPRECATED=y
 CONFIG_SWP_EMULATION=y
 CONFIG_CP15_BARRIER_EMULATION=y
@@ -1940,6 +1941,7 @@ CONFIG_WLAN_VENDOR_INTEL=y
 # CONFIG_IWL4965 is not set
 # CONFIG_IWL3945 is not set
 # CONFIG_IWLWIFI is not set
+# CONFIG_IWL7000 is not set
 CONFIG_WLAN_VENDOR_INTERSIL=y
 CONFIG_HOSTAP=m
 CONFIG_HOSTAP_FIRMWARE=y
@@ -4330,6 +4332,7 @@ CONFIG_CHROMEOS=y
 CONFIG_CHROMEOS_OF_FIRMWARE=y
 CONFIG_CROS_EC_CHARDEV=y
 CONFIG_CROS_EC_PROTO=y
+# CONFIG_CROS_EC_SYSFS_USB is not set
 CONFIG_CLKDEV_LOOKUP=y
 CONFIG_HAVE_CLK_PREPARE=y
 CONFIG_COMMON_CLK=y