diff --git a/kernel.spec b/kernel.spec
index 62de309..48ee49a 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -12,7 +12,7 @@
 # change below to w4T.xzdio):
 %define _binary_payload w3T.xzdio
 
-%global distro_build 545
+%global distro_build 546
 
 # Sign the x86_64 kernel for secure boot authentication
 %ifarch x86_64 aarch64 s390x ppc64le
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 545.rt7.334.el8
+%define pkgrelease 546.rt7.335.el8
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 545.rt7.334%{?dist}
+%define specrelease 546.rt7.335%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -147,7 +147,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .334
+%global rtbuild .335
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2698,6 +2698,35 @@ fi
 #
 #
 %changelog
+* Fri Mar 15 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-546.rt7.335.el8]
+- [rt] build kernel-rt-4.18.0-546.rt7.335.el8 [RHEL-5332]
+- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602}
+- NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266]
+- smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565}
+- scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942]
+- scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942]
+- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448}
+- smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
+- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434}
+- smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143]
+- cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143]
+- cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143]
+- cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143]
+- cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143]
+- cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143]
+- cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143]
+- nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
+- nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
+- lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
+- cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
+- ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441]
+- filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441]
+- dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849]
+- dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]
+- dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849]
+- dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849]
+- dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849]
+
 * Wed Mar 13 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-545.rt7.334.el8]
 - [rt] build kernel-rt-4.18.0-545.rt7.334.el8 [RHEL-5332]
 - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667]
diff --git a/sources b/sources
index bea2d0a..087197f 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-545.rt7.334.el8.tar.xz) = d09634bfeff2a72e8295c7ac6c8f4e8316dee31dfe736714ebc5de04bc98b17bff9b836ec62094bff87a02300b810b634d22ac6bd3210d592b963b421c9213b6
+SHA512 (linux-4.18.0-546.rt7.335.el8.tar.xz) = fb573af2d456530afa1748e5f25079c9efa6b696a51f8f48470d5fc0b2dd7111b4214e0871fe26232b1d739fbbe61287f2e106bd97c2358fcedd97140af42f2f