diff --git a/kernel.spec b/kernel.spec
index 1d2e85c..7940905 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.21.1.rt7.362.el8_10
+%define pkgrelease 553.22.1.rt7.363.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.21.1.rt7.362%{?dist}
+%define specrelease 553.22.1.rt7.363%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .362
+%global rtbuild .363
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2699,6 +2699,10 @@ fi
 #
 #
 %changelog
+* Wed Sep 11 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.22.1.rt7.363.el8_10]
+- [rt] build kernel-rt-4.18.0-553.22.1.rt7.363.el8_10 [RHEL-53529]
+- wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071}
+
 * Wed Sep 04 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.21.1.rt7.362.el8_10]
 - [rt] build kernel-rt-4.18.0-553.21.1.rt7.362.el8_10 [RHEL-53529]
 - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874]
diff --git a/sources b/sources
index a05b6cc..7ad7950 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.21.1.rt7.362.el8_10.tar.xz) = 61f154b92522c487262a8387e0ff361651a9dd6af99b7a35ce61a7e802b7f562b8c3075aa93117370ef2312b0f288abe097a5d654765e3b798d44bd729768e6e
+SHA512 (linux-4.18.0-553.22.1.rt7.363.el8_10.tar.xz) = 781efd9f434ff65918466014112438ed9bd2362c214ed4fc2330f32c55310d13a3c5c4972b8335a468b7d72c8ec2022676a8c3ce18144b245f29a48560df2374