diff --git a/core/linux-armv7/PKGBUILD b/core/linux-armv7/PKGBUILD
index 0ef40ed46..f11d6cdad 100644
--- a/core/linux-armv7/PKGBUILD
+++ b/core/linux-armv7/PKGBUILD
@@ -8,7 +8,7 @@ _srcname=linux-6.11
 _kernelname=${pkgbase#linux}
 _desc="ARMv7 multi-platform"
 pkgver=6.11
-pkgrel=2
+pkgrel=3
 rcnver=6.11.0
 rcnrel=multiv7-r1
 arch=('armv7h')
@@ -17,7 +17,7 @@ license=('GPL2')
 makedepends=('xmlto' 'docbook-xsl' 'kmod' 'inetutils' 'bc' 'git' 'uboot-tools' 'vboot-utils' 'dtc')
 options=('!strip')
 source=("https://www.kernel.org/pub/linux/kernel/v6.x/${_srcname}.tar.xz"
-        #"https://www.kernel.org/pub/linux/kernel/v6.x/patch-${pkgver}.xz"
+        "https://www.kernel.org/pub/linux/kernel/v6.x/patch-${pkgver}.xz"
         "https://rcn-ee.com/deb/sid-armhf/v${rcnver}-${rcnrel}/patch-${rcnver%.0}-${rcnrel}.diff.gz"
         '0001-ARM-atags-add-support-for-Marvell-s-u-boot.patch'
         '0002-ARM-atags-fdt-retrieve-MAC-addresses-from-Marvell-bo.patch'
@@ -32,6 +32,7 @@ source=("https://www.kernel.org/pub/linux/kernel/v6.x/${_srcname}.tar.xz"
         'kernel_data_key.vbprivk'
         'linux.preset')
 md5sums=('612a9feef07be8663098a0a58cddf7a6'
+         '34b2dcd66d05861b6fd46bffd5228f3d'
          'a8fee8d94b748323e10b256c3589dd10'
          'f531ad638bb6dd9d8e9e2e880c97ea12'
          'e3b3f3fa4ccd1f63b24fb6985c8052f3'
@@ -40,7 +41,7 @@ md5sums=('612a9feef07be8663098a0a58cddf7a6'
          '74f514abbd92de3368e3d4cf11165317'
          '8782b146a24e043a1da5e437f689e864'
          '527b0497440d97de53ee1e31fd51bdbc'
-         '936cc523e8db64e4430f1a75495f0120'
+         'ce73991542f08c13042d8a766eeb9e79'
          '9e4fc0be1094c64af6f127e5be9ceb50'
          '61c5ff73c136ed07a7aadbf58db3d96a'
          '584777ae88bce2c5659960151b64c7d8'
diff --git a/core/linux-armv7/config b/core/linux-armv7/config
index 3f47cacf1..6e3dd5b20 100644
--- a/core/linux-armv7/config
+++ b/core/linux-armv7/config
@@ -10559,7 +10559,7 @@ CONFIG_SECURITY_SMACK_BRINGUP=y
 # CONFIG_SECURITY_YAMA is not set
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
-# CONFIG_SECURITY_LANDLOCK is not set
+CONFIG_SECURITY_LANDLOCK=y
 CONFIG_INTEGRITY=y
 # CONFIG_INTEGRITY_SIGNATURE is not set
 CONFIG_INTEGRITY_AUDIT=y