diff --git a/.gitignore b/.gitignore
index a34f346..42379da 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,5 @@
 /v3.11.0.tar.gz
 /v3.12.0.tar.gz
 /linux-6.2.14.tar.xz
+/v4.0.0.tar.gz
+/linux-6.4.7.tar.xz
diff --git a/libkrunfw.spec b/libkrunfw.spec
index 41f9dc3..7cf83c4 100644
--- a/libkrunfw.spec
+++ b/libkrunfw.spec
@@ -2,11 +2,11 @@
 # the VM's memory, so no useful debug info can be generated from it.
 %global debug_package %{nil}
 
-%global kernel linux-6.2.14
+%global kernel linux-6.4.7
 
 Name:           libkrunfw
-Version:        3.12.0
-Release:        2%{?dist}
+Version:        4.0.0
+Release:        1%{?dist}
 Summary:        A dynamic library bundling the guest payload consumed by libkrun
 License:        LGPLv2 and GPLv2
 URL:            https://github.com/containers/libkrunfw
@@ -96,7 +96,7 @@ cp %{SOURCE1} tarballs/
 %endif
 
 %files
-%{_libdir}/libkrunfw.so.3
+%{_libdir}/libkrunfw.so.4
 %{_libdir}/libkrunfw.so.%{version}
 
 %files devel
@@ -104,7 +104,7 @@ cp %{SOURCE1} tarballs/
 
 %ifarch x86_64
 %files sev
-%{_libdir}/libkrunfw-sev.so.3
+%{_libdir}/libkrunfw-sev.so.4
 %{_libdir}/libkrunfw-sev.so.%{version}
 %{_bindir}/krunfw_measurement
 
@@ -113,6 +113,9 @@ cp %{SOURCE1} tarballs/
 %endif
 
 %changelog
+* Sun Dec 24 2023 Sergio Lopez <slp@redhat.com> - 4.0.0-1
+- Update to 4.0.0 which bundles a 6.4.7 kernel
+
 * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.12.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index d5b59bc..8e6b896 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (v3.12.0.tar.gz) = 78036e03d41d2f40708311af4910609afb0a564cc7282851e2e1428c4f6b67cad3a9c2327bca8ebc8804da5276d2b2795d000a6d206197e70af148359b6793ea
-SHA512 (linux-6.2.14.tar.xz) = 39fe2e687614886618ec94b133cd05394541fc423ec9f7e7e8b59a866a30984ac0ad4393b8264b1cd58c62d44019edf336a02c82adaaca4813ed57f33f22fa03
+SHA512 (v4.0.0.tar.gz) = 3d26343c06acff5c36c0f42453d4bfd43fe5b82178768d93a64cf5ff2e7c757912ad3ccb00b3757cc37538db4ed508c31cacbb173ad9067269f29c7b8b2b9941
+SHA512 (linux-6.4.7.tar.xz) = ae5a716fffc66ff5f9d60509473028ed31bf987f641b970e020ea70c6b8a36405954c4232ddfbbaea8b62d66e53998ee35c4fee555fc1af915bf41e70ebbcc62