diff --git a/kernel.spec b/kernel.spec
index 26fa719..e5a05f7 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.63.1.rt7.404.el8_10
+%define pkgrelease 553.64.1.rt7.405.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.63.1.rt7.404%{?dist}
+%define specrelease 553.64.1.rt7.405%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .404
+%global rtbuild .405
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2708,6 +2708,17 @@ fi
 #
 #
 %changelog
+* Wed Jul 23 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.64.1.rt7.405.el8_10]
+- [rt] build kernel-rt-4.18.0-553.64.1.rt7.405.el8_10
+- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919}
+- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256]
+- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977}
+- wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905}
+- workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292]
+- workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292]
+- workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292]
+- workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292]
+
 * Thu Jul 17 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.63.1.rt7.404.el8_10]
 - [rt] build kernel-rt-4.18.0-553.63.1.rt7.404.el8_10
 - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154}
diff --git a/sources b/sources
index b8d8ced..4e69998 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.63.1.rt7.404.el8_10.tar.xz) = 3cc8d8e753654fc8773d36f5b1cd10a3203d6ee3c71bd92b121d1cc17b3c72260d9dfd9302d36125a1fe8ee01097009a53ff133e357c30e93d795cec649f804e
+SHA512 (linux-4.18.0-553.64.1.rt7.405.el8_10.tar.xz) = 36cb4886fe8220160e62b3d1c6a1aa401786101d07eca9169e221b3aa964a6757d5433213ec47b80c260fc4ae2bebf03d4fd70f38ad022545007afae51f2ac7a