diff --git a/device/testing/linux-postmarketos-asahi/APKBUILD b/device/testing/linux-postmarketos-asahi/APKBUILD
index 770fbba8e..13f33db0c 100644
--- a/device/testing/linux-postmarketos-asahi/APKBUILD
+++ b/device/testing/linux-postmarketos-asahi/APKBUILD
@@ -1,6 +1,6 @@
 maintainer="Clayton Craft <clayton@craftyguy.net>"
 pkgname=linux-postmarketos-asahi
-pkgver=7.0.10_p2
+pkgver=7.0.11_p2
 pkgrel=0
 _rel=${pkgver#*_p}
 _kver=${pkgver%_p*}
@@ -88,7 +88,7 @@ package() {
 }
 
 sha512sums="
-61ec8e26811631ab022b472f5939d38f4962d6d0d6fd202e0197380010fa1ef1e01d50a83021183698a7cfc0b3e5fceffdaa1a784a4d6909ba550eface3b209f  linux-postmarketos-asahi-7.0.10-2.tar.gz
-e6c88b96cda925f2a20dcdf930eef751777f69f647a2232d725990d14e52e0ad6c9f928aa0084c68abf7dd066b3b02426ec7b8aa3bddd1c91e57273b4f18de95  config-postmarketos-asahi.aarch64
+c04f15e7b231d37aa14c2311eb580e56adca1bc32e718fbbf4651bd12d89a864b1b396f83640d9b57e5729390312262d35b1709c83dbdf6988fb69f3ba4663ac  linux-postmarketos-asahi-7.0.11-2.tar.gz
+1444f29dc22fc98419ca3fe71d9d41890597c33cf3b2befba1f14fcf970b6172abebbfac95a3bbf9229a393954864a94f181cfd7fb8cedf9ac9a51f7540ff351  config-postmarketos-asahi.aarch64
 8d205300cfabe192b53ed1cc644b087e76421eb973e1b2a31d657e4f2676badebdfcf6b0865569c43b4b904935435f6e729c3a8d4a6221fb5792e40ec1017a0f  0001-nvmem-apple-spmi-nvmem-Fix-CFI-failures.patch
 "
diff --git a/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64 b/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
index 004d894d5..88cfcdd4d 100644
--- a/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
+++ b/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 7.0.8 Kernel Configuration
+# Linux/arm64 7.0.11 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.3"
 CONFIG_GCC_VERSION=0
@@ -11,7 +11,7 @@ CONFIG_AS_VERSION=220103
 CONFIG_LD_VERSION=0
 CONFIG_LD_IS_LLD=y
 CONFIG_LLD_VERSION=220103
-CONFIG_RUSTC_VERSION=109500
+CONFIG_RUSTC_VERSION=109600
 CONFIG_RUST_IS_AVAILABLE=y
 CONFIG_RUSTC_LLVM_VERSION=220103
 CONFIG_CC_CAN_LINK=y
@@ -289,7 +289,7 @@ CONFIG_PERF_EVENTS=y
 CONFIG_SYSTEM_DATA_VERIFICATION=y
 CONFIG_PROFILING=y
 CONFIG_RUST=y
-CONFIG_RUSTC_VERSION_TEXT="rustc 1.95.0 (59807616e 2026-04-14) (Alpine Linux Rust 1.95.0-r0)"
+CONFIG_RUSTC_VERSION_TEXT="rustc 1.96.0 (ac68faa20 2026-05-25) (Alpine Linux Rust 1.96.0-r0)"
 CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.72.1"
 CONFIG_TRACEPOINTS=y
 
@@ -4131,7 +4131,6 @@ CONFIG_GPIO_AGGREGATOR=m
 # CONFIG_GPIO_VIRTUSER is not set
 # end of GPIO Debugging utilities
 
-CONFIG_DEV_SYNC_PROBE=m
 # CONFIG_W1 is not set
 CONFIG_POWER_RESET=y
 # CONFIG_POWER_RESET_GPIO is not set
@@ -5013,7 +5012,6 @@ CONFIG_VIDEO_CADENCE_CSI2RX=m
 #
 # Sunxi media platform drivers
 #
-# CONFIG_VIDEO_DW_MIPI_CSI2RX is not set
 
 #
 # Texas Instruments drivers
@@ -8884,7 +8882,7 @@ CONFIG_SECURITYFS=y
 # CONFIG_SECURITY_TOMOYO is not set
 # CONFIG_SECURITY_APPARMOR is not set
 # CONFIG_SECURITY_LOADPIN is not set
-# CONFIG_SECURITY_YAMA is not set
+CONFIG_SECURITY_YAMA=y
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
 # CONFIG_SECURITY_LANDLOCK is not set
diff --git a/device/testing/linux-postmarketos-asahi/pmos.config b/device/testing/linux-postmarketos-asahi/pmos.config
index 152fcc9e1..1907f359d 100644
--- a/device/testing/linux-postmarketos-asahi/pmos.config
+++ b/device/testing/linux-postmarketos-asahi/pmos.config
@@ -11,12 +11,14 @@ CONFIG_DM_CRYPT=y
 CONFIG_FB=y
 CONFIG_INPUT_EVDEV=m
 # CONFIG_KINETO_GAN is not set
+CONFIG_NLS_ASCII=y
 # CONFIG_PFT is not set
 # CONFIG_SEC_RESTRICT_ROOTING is not set
 CONFIG_SYN_COOKIES=y
 CONFIG_SYSVIPC=y
 CONFIG_TMPFS_POSIX_ACL=y
 # CONFIG_USE_VFB is not set
+CONFIG_VFAT_FS=y
 CONFIG_VT=y
 CONFIG_DRM_FBDEV_EMULATION=y
 CONFIG_BINFMT_SCRIPT=y
@@ -314,9 +316,7 @@ CONFIG_EFI_ESRT=y
 CONFIG_EFI_RUNTIME_WRAPPERS=y
 CONFIG_EFI_STUB=y
 CONFIG_EFI_VARS_PSTORE=y
-CONFIG_NLS_ASCII=y
 CONFIG_PSTORE=y
-CONFIG_VFAT_FS=y
 CONFIG_EFI_GENERIC_STUB=y
 CONFIG_EFI_PARAMS_FROM_FDT=y
 CONFIG_EFI_ZBOOT=y
@@ -496,6 +496,7 @@ CONFIG_DM_VERITY=m
 
 # hardening
 CONFIG_SECURITY_DMESG_RESTRICT=y
+CONFIG_SECURITY_YAMA=y
 CONFIG_SHADOW_CALL_STACK=y
 CONFIG_CFI=y
 # CONFIG_CFI_PERMISSIVE is not set