diff --git a/kernel.spec b/kernel.spec
index f844876..090e1da 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.108.1.rt7.449.el8_10
+%define pkgrelease 553.109.1.rt7.450.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.108.1.rt7.449%{?dist}
+%define specrelease 553.109.1.rt7.450%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .449
+%global rtbuild .450
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2708,6 +2708,9 @@ fi
 #
 #
 %changelog
+* Tue Feb 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.109.1.rt7.450.el8_10]
+- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}
+
 * Thu Feb 19 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.108.1.rt7.449.el8_10]
 - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]
 
diff --git a/sources b/sources
index 74e100b..4d09da9 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.108.1.rt7.449.el8_10.tar.xz) = b07285899694b09a058cdbcc372b96f2ce4686d21709eec350edb3d1fc54037101c83f8c8ccfc6f6c419bee36df210a9a3070efe4d570672fc2ef1b37000cc9a
+SHA512 (linux-4.18.0-553.109.1.rt7.450.el8_10.tar.xz) = d9bd1937e19a067d7146b69363bb52e5aa8a2c955ee90944e3a56dcb974f1f3376b44a9b35a19c7687a41983eec836e4381303a3f108b4bd8e6fbb4216c29aa8