diff --git a/kernel.spec b/kernel.spec
index 560fcaa..592a417 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.93.1.rt7.434.el8_10
+%define pkgrelease 553.94.1.rt7.435.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.93.1.rt7.434%{?dist}
+%define specrelease 553.94.1.rt7.435%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .434
+%global rtbuild .435
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2708,6 +2708,11 @@ fi
 #
 #
 %changelog
+* Tue Jan 13 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.94.1.rt7.435.el8_10]
+- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301}
+- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933}
+- smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051}
+
 * Thu Jan 08 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.93.1.rt7.434.el8_10]
 - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449]
 - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096}
diff --git a/sources b/sources
index df1496a..7e885dc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (linux-4.18.0-553.93.1.rt7.434.el8_10.tar.xz) = 62edda6ad00601d183ad097d8debb426a5a28c050320c797a0c9b72b176a8e6e019918d1f794a3b615c0f3019b41c69b3748b70ea2ed3f130c4b3209662fdfda
+SHA512 (linux-4.18.0-553.94.1.rt7.435.el8_10.tar.xz) = 56246ffe7330d89bfb89fc3ef0870e2d97e16590e700c9dc75e5b2e25098fbcc82061874956d18c6e305e840d2b5a39d82ac6c2c36c43310a8abd9a6a455d574