diff --git a/.gitignore b/.gitignore
index c78cb7b..9da1492 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 SOURCES/centossecureboot201.cer
 SOURCES/centossecurebootca2.cer
-SOURCES/linux-4.18.0-553.70.1.rt7.411.el8_10.tar.xz
+SOURCES/linux-4.18.0-553.71.1.rt7.412.el8_10.tar.xz
 SOURCES/redhatsecureboot302.cer
 SOURCES/redhatsecureboot303.cer
 SOURCES/redhatsecureboot501.cer
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index bebf671..9deba56 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,6 +1,6 @@
 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer
 bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer
-68ec3efcb19fcb07c5a0ccf7b0e1a7db929d77cf SOURCES/linux-4.18.0-553.70.1.rt7.411.el8_10.tar.xz
+90c07e1932c6cd5d03401e8c93f94a523bd645c3 SOURCES/linux-4.18.0-553.71.1.rt7.412.el8_10.tar.xz
 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer
 e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer
 ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index f392e1e..ffa7a44 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.70.1.rt7.411.el8_10
+%define pkgrelease 553.71.1.rt7.412.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.70.1.rt7.411%{?dist}
+%define specrelease 553.71.1.rt7.412%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .411
+%global rtbuild .412
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2708,6 +2708,17 @@ fi
 #
 #
 %changelog
+* Fri Aug 15 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.71.1.rt7.412.el8_10]
+- udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058}
+- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200}
+- gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072]
+- gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072]
+- gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072]
+- writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072]
+- gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232]
+- gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232]
+- gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232]
+
 * Tue Aug 12 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.70.1.rt7.411.el8_10]
 - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380}
 - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250}