diff --git a/kernel.spec b/kernel.spec
index 6700d16..b1b571d 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.136.1.rt7.477.el8_10
+%define pkgrelease 553.137.1.rt7.478.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.136.1.rt7.477%{?dist}
+%define specrelease 553.137.1.rt7.478%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .477
+%global rtbuild .478
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2710,6 +2710,22 @@ fi
 #
 #
 %changelog
+* Fri Jun 19 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.137.1.rt7.478.el8_10]
+- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
+- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
+- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
+- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
+- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435]
+- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
+- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435]
+- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435]
+- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435]
+- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435]
+- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435]
+- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435]
+- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435]
+- ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435]
+
 * Thu Jun 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.136.1.rt7.477.el8_10]
 - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
 - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
diff --git a/sources b/sources
index d49a5c1..75400a6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.136.1.rt7.477.el8_10.tar.xz) = 4f34a43611be82f8c943869c15456ef78dd7da8af264c3425e09cf7fae880f04265ffb2a5fbac263ad3f2d986fe4fdaf8afd2dd0091ca210305956139604f0b8
+SHA512 (linux-4.18.0-553.137.1.rt7.478.el8_10.tar.xz) = 4ea5bb8810e6648f822cb98583c2c36ab3a943dea2fa19747f610a41aba1720cb64a2654f5a599c4301be3cf8fc3f89e9d7502dc0d43077d07fd3910f1f6ab39