diff --git a/kernel-aarch64-debug.config b/kernel-aarch64-debug.config
index a9c4b8d52..82cb82da5 100644
--- a/kernel-aarch64-debug.config
+++ b/kernel-aarch64-debug.config
@@ -3560,6 +3560,7 @@ CONFIG_IBMASR=m
 CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
 CONFIG_IEEE802154_FAKELB=m
diff --git a/kernel-aarch64.config b/kernel-aarch64.config
index e984e1010..62f3b6fb8 100644
--- a/kernel-aarch64.config
+++ b/kernel-aarch64.config
@@ -3576,6 +3576,7 @@ CONFIG_IBMASR=m
 CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
 CONFIG_IEEE802154_FAKELB=m
diff --git a/kernel-ppc64le-debug.config b/kernel-ppc64le-debug.config
index 922ae0dc2..bc16c7dcd 100644
--- a/kernel-ppc64le-debug.config
+++ b/kernel-ppc64le-debug.config
@@ -3203,6 +3203,7 @@ CONFIG_IBM_BSR=m
 CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
diff --git a/kernel-ppc64le.config b/kernel-ppc64le.config
index 985365396..d36880ca0 100644
--- a/kernel-ppc64le.config
+++ b/kernel-ppc64le.config
@@ -3216,6 +3216,7 @@ CONFIG_IBM_BSR=m
 CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
diff --git a/kernel-s390x-debug.config b/kernel-s390x-debug.config
index 47660a950..e841d380a 100644
--- a/kernel-s390x-debug.config
+++ b/kernel-s390x-debug.config
@@ -3269,6 +3269,7 @@ CONFIG_IBMASR=m
 CONFIG_IBM_PARTITION=y
 CONFIG_ICE=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
diff --git a/kernel-s390x-zfcpdump.config b/kernel-s390x-zfcpdump.config
index 299f0d13c..3e61fd8d8 100644
--- a/kernel-s390x-zfcpdump.config
+++ b/kernel-s390x-zfcpdump.config
@@ -3415,6 +3415,7 @@ CONFIG_IBMASR=m
 CONFIG_IBM_PARTITION=y
 CONFIG_ICE=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
 CONFIG_IEEE802154_FAKELB=m
diff --git a/kernel-s390x.config b/kernel-s390x.config
index ae3ea3ed8..7708b7221 100644
--- a/kernel-s390x.config
+++ b/kernel-s390x.config
@@ -3284,6 +3284,7 @@ CONFIG_IBMASR=m
 CONFIG_IBM_PARTITION=y
 CONFIG_ICE=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
 CONFIG_IEEE802154_DRIVERS=m
diff --git a/kernel-x86_64-debug.config b/kernel-x86_64-debug.config
index d02d67fff..ebfd1fdfc 100644
--- a/kernel-x86_64-debug.config
+++ b/kernel-x86_64-debug.config
@@ -3359,6 +3359,7 @@ CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDEAPAD_LAPTOP=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IE6XX_WDT=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
diff --git a/kernel-x86_64.config b/kernel-x86_64.config
index 07bc95f71..705b2657a 100644
--- a/kernel-x86_64.config
+++ b/kernel-x86_64.config
@@ -3374,6 +3374,7 @@ CONFIG_ICE=m
 CONFIG_ICPLUS_PHY=m
 CONFIG_IDEAPAD_LAPTOP=m
 CONFIG_IDLE_PAGE_TRACKING=y
+CONFIG_IDPF=m
 CONFIG_IE6XX_WDT=m
 CONFIG_IEEE802154=m
 CONFIG_IEEE802154_6LOWPAN=m
diff --git a/kernel.spec b/kernel.spec
index 0c592e0d2..74db7a1dc 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 552.1.1.el8_10
+%define pkgrelease 552.2.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 552.1.1%{?dist}
+%define specrelease 552.2.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,71 @@ fi
 #
 #
 %changelog
+* Mon May 06 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.2.1.el8_10]
+- s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598}
+- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615}
+- wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779}
+- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401]
+- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401]
+- mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
+- mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
+- pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118}
+- i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153}
+- RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872}
+- ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723]
+- ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870]
+- ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870]
+- fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973}
+- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901}
+- idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652]
+- redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652]
+- idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652]
+- idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652]
+- idpf: always allocate a full page (Michal Schmidt) [RHEL-15652]
+- idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652]
+- idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652]
+- idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652]
+- idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652]
+- idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652]
+- idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652]
+- idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652]
+- idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652]
+- idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652]
+- idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652]
+- idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652]
+- idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652]
+- idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652]
+- idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652]
+- idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652]
+- idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652]
+- idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652]
+- idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652]
+- idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652]
+- idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652]
+- idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652]
+- idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652]
+- idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652]
+- idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652]
+- idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652]
+- idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652]
+- idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652]
+- idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652]
+- idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652]
+- idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652]
+- idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652]
+- idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652]
+- idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652]
+- idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652]
+- idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652]
+- idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652]
+- idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652]
+- idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652]
+- idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652]
+- virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652]
+- net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652]
+- net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652]
+- net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652]
+
 * Fri Apr 26 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.1.1.el8_10]
 - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko)
 - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185}
diff --git a/sources b/sources
index 1a768e88e..6b99e7d84 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-552.1.1.el8_10.tar.xz) = a5c4a714b4949f3bae1210e076690e4e222ca1d0b6477339fb58533e9c23f4e1ae891972855f5ae00034e99b78fe6cb9096444c625664e8afb509fe8cee99395
-SHA512 (kernel-abi-stablelists-4.18.0-552.tar.bz2) = 298349656939cb3cd628c89787516a3d013fecb9971aa450a707f0d109833d0a46e0560b29fa53d31d54a12fb9107e98fdeb8103faefb7ec64cfe387c1c66988
+SHA512 (linux-4.18.0-552.2.1.el8_10.tar.xz) = 25998e91af1523779460a1e566bc036583fdf7f72291454e1c5671baedfad1a838d5c3cf3de9c5f544b4deee1bc221dd0445076ce77720cc266ba088d8b32a86
+SHA512 (kernel-abi-stablelists-4.18.0-552.tar.bz2) = ccd5e87614b2998183dfe4b1f4bebc1b6717da6c0b7d6daa18fee8abba70d5a155a4a009fc0f0355640a1b426e3ad5818dc435942b235511619a6f1639e8ff5e
 SHA512 (kernel-kabi-dw-4.18.0-552.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf