diff --git a/board/mister/de10nano/patches/linux/linux.hash b/board/mister/de10nano/patches/linux/linux.hash
index 7dee7ba..52c6d85 100644
--- a/board/mister/de10nano/patches/linux/linux.hash
+++ b/board/mister/de10nano/patches/linux/linux.hash
@@ -90,4 +90,4 @@ sha256  5ebdadb10a4b5708fc6b1c457764a110bc49f8150cc3502c59b921ead8c6fc8c  linux-
 # also the one case scripts/hash-sync-kernel.sh refuses to automate -- it
 # declines any value containing "-rc" and leaves this line alone, so the build
 # fails closed rather than blessing a snapshot nobody looked at.
-sha256  7d0e7ce14f98c43efe880cffbf354a59be45928fdf7170d7333c374ae91c0d83  linux-7.2.2.tar.xz
+sha256  8ba259e8e7b13ec6ef0941c8a39ad90b24bd4a4d6c0010ba6bafb794550ecd03  linux-7.2.3.tar.xz
diff --git a/configs/mister_rt.fragment b/configs/mister_rt.fragment
index 605a89e..371fcdb 100644
--- a/configs/mister_rt.fragment
+++ b/configs/mister_rt.fragment
@@ -64,7 +64,7 @@
 # exemption, so the tarball MUST have a sha256 line there or the build fails
 # closed at download. Bump the version here -> update that line in the same
 # commit (its header says where the value must come from).
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="7.2.2"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="7.2.3"
 
 # --- Beta patch set -----------------------------------------------------------
 # linux-patches-beta/ is a series-file-driven SUBSET of linux-patches/: symlinks