diff --git a/Makefile b/Makefile
index 82bf36ae30..0439f54afa 100644
--- a/Makefile
+++ b/Makefile
@@ -23,7 +23,7 @@ DEBUG_TOOLS_SOURCE := scratch
 EMBED_TARGET ?= embed
 
 PKGS_PREFIX ?= ghcr.io/siderolabs
-PKGS ?= v1.10.0-alpha.0-18-ge7eddcf
+PKGS ?= v1.10.0-alpha.0-23-gc9d718d
 EXTRAS ?= v1.9.0
 
 KRES_IMAGE ?= ghcr.io/siderolabs/kres:latest
diff --git a/hack/release.toml b/hack/release.toml
index 95c0e636cb..fe45dc2667 100644
--- a/hack/release.toml
+++ b/hack/release.toml
@@ -18,8 +18,9 @@ preface = """
     [notes.updates]
         title = "Component Updates"
         description = """\
-* Linux: 6.12.6
+* Linux: 6.12.8
 * CNI plugins: 1.6.1
+* runc: 1.2.4
 
 Talos is built with Go 1.23.4.
 """
diff --git a/pkg/machinery/constants/constants.go b/pkg/machinery/constants/constants.go
index b118c324b1..6b48a951c6 100644
--- a/pkg/machinery/constants/constants.go
+++ b/pkg/machinery/constants/constants.go
@@ -14,7 +14,7 @@ import (
 
 const (
 	// DefaultKernelVersion is the default Linux kernel version.
-	DefaultKernelVersion = "6.12.6-talos"
+	DefaultKernelVersion = "6.12.8-talos"
 
 	// KernelModulesPath is the default path to the kernel modules without the kernel version.
 	KernelModulesPath = "/lib/modules"
diff --git a/pkg/machinery/gendata/data/pkgs b/pkg/machinery/gendata/data/pkgs
index 724ebad30a..2b1cd7db68 100644
--- a/pkg/machinery/gendata/data/pkgs
+++ b/pkg/machinery/gendata/data/pkgs
@@ -1 +1 @@
-v1.10.0-alpha.0-18-ge7eddcf
\ No newline at end of file
+v1.10.0-alpha.0-23-gc9d718d
\ No newline at end of file