diff --git a/board/mister/de10nano/patches/linux/linux.hash b/board/mister/de10nano/patches/linux/linux.hash
index bd274e0d..50238065 100644
--- a/board/mister/de10nano/patches/linux/linux.hash
+++ b/board/mister/de10nano/patches/linux/linux.hash
@@ -90,4 +90,4 @@ sha256  ae826f33111fea6f1d279dde7299d7463c8dfd204aeb75a8fb5432bc60a28191  linux-
 # also the one case scripts/hash-sync-kernel.sh refuses to automate -- it
 # declines any value containing "-rc" and leaves this line alone, so the build
 # fails closed rather than blessing a snapshot nobody looked at.
-sha256  8ba259e8e7b13ec6ef0941c8a39ad90b24bd4a4d6c0010ba6bafb794550ecd03  linux-7.2.3.tar.xz
+sha256  01710ee01737dac492f1bae52becd057e08d20d11589089aa06accff415c28dd  linux-7.2.4.tar.xz
diff --git a/configs/mister_rt.fragment b/configs/mister_rt.fragment
index adfe3557..6a53fc00 100644
--- a/configs/mister_rt.fragment
+++ b/configs/mister_rt.fragment
@@ -16,7 +16,7 @@
 # This pin is a signed-manifest release, strictly stronger than the TOFU hash
 # the old -rc pins had: do NOT reintroduce a TOFU value here without moving
 # back to an -rc (the sync script refuses -rc values; only a hand pin can).
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="7.2.3"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="7.2.4"
 
 # --- Beta patch set: the series-file-driven subset of linux-patches/ (§7.2) ---
 # WARNING: the series deliberately DROPS 0047 (already in 7.2; at -F0 its hunk