diff --git a/kernel.spec b/kernel.spec
index 1ba9f99..1801035 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.90.1.rt7.431.el8_10
+%define pkgrelease 553.91.1.rt7.432.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.90.1.rt7.431%{?dist}
+%define specrelease 553.91.1.rt7.432%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .431
+%global rtbuild .432
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2708,6 +2708,26 @@ fi
 #
 #
 %changelog
+* Tue Dec 23 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.91.1.rt7.432.el8_10]
+- gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355]
+- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355]
+- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240}
+- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
+- cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963]
+- perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171]
+- perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171]
+- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226]
+- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226]
+- blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744]
+- blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744]
+- blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744]
+- sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744]
+
 * Sat Dec 13 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.90.1.rt7.431.el8_10]
 - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945]
 
diff --git a/sources b/sources
index da70e3e..2aa4ad5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.90.1.rt7.431.el8_10.tar.xz) = 7fbe62e4dd80f5572d686e6a031955a6979492ba7325fcccc2d4a42f66b2969a657c3208180ea20db81fa38e65cde9ff7a7da1459ac5d1f9024a36f8160b8c09
+SHA512 (linux-4.18.0-553.91.1.rt7.432.el8_10.tar.xz) = b4ec0eb7774a6afdb574283b9069617de588e6d3951bad4659d806729c8e8c9173287dfe853d52bf64245b791f5044648047a111cbfeb6c1a836ea58f2c2a6cb