diff --git a/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/.gitignore b/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/.gitignore
index 285a565e..9f2b1ab1 100644
--- a/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/.gitignore
+++ b/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/.gitignore
@@ -1,2 +1,3 @@
 linux-4.14*
 kernel-4.14*
+lib
diff --git a/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/armel-iproc-all.config b/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/armel-iproc-all.config
index 2f88643c..4b029b25 100644
--- a/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/armel-iproc-all.config
+++ b/packages/base/any/kernels/4.14-lts/configs/armel-iproc-all/armel-iproc-all.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 4.14.49 Kernel Configuration
+# Linux/arm 4.14.109 Kernel Configuration
 #
 CONFIG_ARM=y
 CONFIG_ARM_HAS_SG_CHAIN=y
@@ -60,6 +60,7 @@ CONFIG_GENERIC_IRQ_PROBE=y
 CONFIG_GENERIC_IRQ_SHOW=y
 CONFIG_GENERIC_IRQ_SHOW_LEVEL=y
 CONFIG_GENERIC_IRQ_EFFECTIVE_AFF_MASK=y
+CONFIG_GENERIC_IRQ_MIGRATION=y
 CONFIG_HARDIRQS_SW_RESEND=y
 CONFIG_IRQ_DOMAIN=y
 CONFIG_IRQ_DOMAIN_HIERARCHY=y
@@ -439,6 +440,8 @@ CONFIG_SWP_EMULATE=y
 # CONFIG_CPU_BIG_ENDIAN is not set
 # CONFIG_CPU_ICACHE_DISABLE is not set
 # CONFIG_CPU_BPREDICT_DISABLE is not set
+CONFIG_CPU_SPECTRE=y
+CONFIG_HARDEN_BRANCH_PREDICTOR=y
 CONFIG_KUSER_HELPERS=y
 # CONFIG_VDSO is not set
 CONFIG_OUTER_CACHE=y
@@ -1386,7 +1389,7 @@ CONFIG_BONDING=y
 # CONFIG_NETCONSOLE is not set
 # CONFIG_NETPOLL is not set
 # CONFIG_NET_POLL_CONTROLLER is not set
-# CONFIG_TUN is not set
+CONFIG_TUN=y
 # CONFIG_TUN_VNET_CROSS_LE is not set
 # CONFIG_VETH is not set
 # CONFIG_NLMON is not set
diff --git a/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/.gitignore b/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/.gitignore
index 285a565e..9f2b1ab1 100644
--- a/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/.gitignore
+++ b/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/.gitignore
@@ -1,2 +1,3 @@
 linux-4.14*
 kernel-4.14*
+lib
diff --git a/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/armhf-iproc-all.config b/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/armhf-iproc-all.config
index c5bc18eb..ff79d9ee 100644
--- a/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/armhf-iproc-all.config
+++ b/packages/base/any/kernels/4.14-lts/configs/armhf-iproc-all/armhf-iproc-all.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm 4.14.49 Kernel Configuration
+# Linux/arm 4.14.109 Kernel Configuration
 #
 CONFIG_ARM=y
 CONFIG_ARM_HAS_SG_CHAIN=y
@@ -60,6 +60,7 @@ CONFIG_GENERIC_IRQ_PROBE=y
 CONFIG_GENERIC_IRQ_SHOW=y
 CONFIG_GENERIC_IRQ_SHOW_LEVEL=y
 CONFIG_GENERIC_IRQ_EFFECTIVE_AFF_MASK=y
+CONFIG_GENERIC_IRQ_MIGRATION=y
 CONFIG_HARDIRQS_SW_RESEND=y
 CONFIG_IRQ_DOMAIN=y
 CONFIG_IRQ_DOMAIN_HIERARCHY=y
@@ -439,6 +440,8 @@ CONFIG_SWP_EMULATE=y
 # CONFIG_CPU_BIG_ENDIAN is not set
 # CONFIG_CPU_ICACHE_DISABLE is not set
 # CONFIG_CPU_BPREDICT_DISABLE is not set
+CONFIG_CPU_SPECTRE=y
+CONFIG_HARDEN_BRANCH_PREDICTOR=y
 CONFIG_KUSER_HELPERS=y
 # CONFIG_VDSO is not set
 CONFIG_OUTER_CACHE=y
@@ -1386,7 +1389,7 @@ CONFIG_BONDING=y
 # CONFIG_NETCONSOLE is not set
 # CONFIG_NETPOLL is not set
 # CONFIG_NET_POLL_CONTROLLER is not set
-# CONFIG_TUN is not set
+CONFIG_TUN=y
 # CONFIG_TUN_VNET_CROSS_LE is not set
 # CONFIG_VETH is not set
 # CONFIG_NLMON is not set
diff --git a/packages/base/any/kernels/4.14-lts/configs/x86_64-all/x86_64-all.config b/packages/base/any/kernels/4.14-lts/configs/x86_64-all/x86_64-all.config
index 15af9440..aa91ebe6 100755
--- a/packages/base/any/kernels/4.14-lts/configs/x86_64-all/x86_64-all.config
+++ b/packages/base/any/kernels/4.14-lts/configs/x86_64-all/x86_64-all.config
@@ -444,7 +444,7 @@ CONFIG_X86_FAST_FEATURE_TESTS=y
 CONFIG_X86_X2APIC=y
 CONFIG_X86_MPPARSE=y
 # CONFIG_GOLDFISH is not set
-CONFIG_RETPOLINE=y
+# CONFIG_RETPOLINE is not set
 # CONFIG_INTEL_RDT is not set
 CONFIG_X86_EXTENDED_PLATFORM=y
 # CONFIG_X86_VSMP is not set
diff --git a/packages/base/any/kernels/4.14-lts/kconfig.mk b/packages/base/any/kernels/4.14-lts/kconfig.mk
index c3d7e661..4cefdfbc 100644
--- a/packages/base/any/kernels/4.14-lts/kconfig.mk
+++ b/packages/base/any/kernels/4.14-lts/kconfig.mk
@@ -21,7 +21,7 @@
 THIS_DIR := $(abspath $(dir $(lastword $(MAKEFILE_LIST))))
 K_MAJOR_VERSION := 4
 K_PATCH_LEVEL := 14
-K_SUB_LEVEL := 49
+K_SUB_LEVEL := 109
 K_SUFFIX :=
 K_PATCH_DIR := $(THIS_DIR)/patches
 K_MODSYNCLIST := tools/objtool
diff --git a/packages/base/any/kernels/4.14-lts/patches/brcm-iproc-4.14.patch b/packages/base/any/kernels/4.14-lts/patches/brcm-iproc-4.14.patch
index d2023acb..5c765afc 100644
--- a/packages/base/any/kernels/4.14-lts/patches/brcm-iproc-4.14.patch
+++ b/packages/base/any/kernels/4.14-lts/patches/brcm-iproc-4.14.patch
@@ -25301,7 +25301,7 @@ diff -uprN -EbwB --no-dereference -X /home/kevin/BRCM_DISK/disk1/xldksw/INTERNAL
  #define BSPI_BPP_MODE_SELECT_MASK		BIT(8)
  #define BSPI_BPP_ADDR_SELECT_MASK		BIT(16)
  
--#define BSPI_READ_LENGTH			512
+-#define BSPI_READ_LENGTH			256
 +//#define BSPI_READ_LENGTH			512
  
  /* MSPI register offsets */