diff --git a/pkgs/os-specific/linux/kernel/linux-4.9.nix b/pkgs/os-specific/linux/kernel/linux-4.9.nix
index 1c7cc7b2f15..7ced7f1dbdf 100644
--- a/pkgs/os-specific/linux/kernel/linux-4.9.nix
+++ b/pkgs/os-specific/linux/kernel/linux-4.9.nix
@@ -1,11 +1,12 @@
 { stdenv, hostPlatform, fetchurl, perl, buildLinux, ... } @ args:

 import ./generic.nix (args // rec {
-  version = "4.9.74";
+  version = "4.9.75-rc1";
   extraMeta.branch = "4.9";

   src = fetchurl {
-    url = "mirror://kernel/linux/kernel/v4.x/linux-${version}.tar.xz";
+    url = "mirror://kernel/linux/kernel/v4.x/linux-4.9.74.tar.xz";
     sha256 = "1ivhzmsa8n5ns8igryzb9dyaakq2p51j23f6j9kpqyby7842i1y8";
   };
+
 } // (args.argsOverride or {}))
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 1ce681f3625..3f24cf0998d 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -12315,6 +12315,12 @@ with pkgs;
       [ kernelPatches.bridge_stp_helper
         kernelPatches.cpu-cgroup-v2."4.9"
         kernelPatches.modinst_arg_list_too_long
+        { name = "kpti";
+          patch = fetchurl {
+            url = https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.75-rc1.xz;
+            sha256 = "0685bdmdj2v4fiash19sqi17h39r0hqx9a6dvmwchkwx5g9f90hs";
+          };
+        }
       ]
       ++ lib.optionals ((platform.kernelArch or null) == "mips")
       [ kernelPatches.mips_fpureg_emu