diff --git a/.gitignore b/.gitignore
index 7b2753c..7c3094c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer
 SOURCES/centossecurebootca2.cer
 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2
-SOURCES/linux-4.18.0-553.87.1.el8_10.tar.xz
+SOURCES/linux-4.18.0-553.89.1.el8_10.tar.xz
 SOURCES/redhatsecureboot302.cer
 SOURCES/redhatsecureboot303.cer
 SOURCES/redhatsecureboot501.cer
diff --git a/.kernel.metadata b/.kernel.metadata
index 9f0c379..5da2c3a 100644
--- a/.kernel.metadata
+++ b/.kernel.metadata
@@ -1,8 +1,8 @@
 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer
 bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer
-377c8203eaefc0764c1ff933738f6359674640e9 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
-85b249e36c614e5a95074485eef0813636d50ed2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2
-e5c87c640da3dd6d66252ca0a7fab3d45de3d9e8 SOURCES/linux-4.18.0-553.87.1.el8_10.tar.xz
+41aac99ab74b653a2ad85486c79e43f3c0523d4b SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2
+58acdefe9b43ea6e2f6b30ab368d664e66c35edf SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2
+735ea56cb29779b1d0d8aa895ee7d069e85e4f42 SOURCES/linux-4.18.0-553.89.1.el8_10.tar.xz
 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer
 e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer
 ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 86b4731..68d8a0c 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.87.1.el8_10
+%define pkgrelease 553.89.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.87.1%{?dist}
+%define specrelease 553.89.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,18 @@ fi
 #
 #
 %changelog
+* Sat Nov 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.89.1.el8_10]
+- mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
+- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
+- mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
+- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
+- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]
+
+* Thu Nov 27 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.88.1.el8_10]
+- scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
+- RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
+- RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}
+
 * Tue Nov 25 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.87.1.el8_10]
 - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
 - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}