diff --git a/kernel.spec b/kernel.spec
index 795a511..184565b 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.58.1.rt7.399.el8_10
+%define pkgrelease 553.59.1.rt7.400.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.58.1.rt7.399%{?dist}
+%define specrelease 553.59.1.rt7.400%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .399
+%global rtbuild .400
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2699,6 +2699,22 @@ fi
 #
 #
 %changelog
+* Thu Jun 19 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.59.1.rt7.400.el8_10]
+- [rt] build kernel-rt-4.18.0-553.59.1.rt7.400.el8_10
+- SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291]
+- SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291]
+- tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291]
+- xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132]
+- Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111}
+- Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136}
+- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136}
+- Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136}
+- Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136}
+- Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136}
+- fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709]
+- NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932]
+- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932]
+
 * Thu Jun 12 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.58.1.rt7.399.el8_10]
 - [rt] build kernel-rt-4.18.0-553.58.1.rt7.399.el8_10
 - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764}
diff --git a/sources b/sources
index ece89c5..6527a1a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.58.1.rt7.399.el8_10.tar.xz) = 264b445e63163d0baa31b48c445b2f213ca35ea101a61337839e7d627d28755c9b70bb9a9d6127b8f11a7b9022ef91831bb4b3c60cbd0be9963cd4b3c2d89058
+SHA512 (linux-4.18.0-553.59.1.rt7.400.el8_10.tar.xz) = 03a1a15adec5c3f01f52310db8ba03e6c5e05e075f34e35836b7122f40d6cf6f63384c4ab3fbc663b12e8a917164a1eef6b865b792534e84c45d5df955d72987