diff --git a/kernel.spec b/kernel.spec
index c2db6e69a..f972c4643 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.134.1.el8_10
+%define pkgrelease 553.135.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.134.1%{?dist}
+%define specrelease 553.135.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,14 @@ fi
 #
 #
 %changelog
+* Wed Jun 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.135.1.el8_10]
+- drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488}
+- sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520]
+- RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145}
+- ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090}
+- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279}
+- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419}
+
 * Fri Jun 12 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.134.1.el8_10]
 - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125}
 - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152}
diff --git a/sources b/sources
index 2f76555b9..adba43919 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.134.1.el8_10.tar.xz) = 0e3c09586203af95b451dcf4163d74a393e62f67445598d5a1493c853cfc039decbae933ed40d50432c0e4dadaf71c93078d0245da8ee1ac6ad5d57d358b36f8
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 90982e0f5ceb52c0e86345237073cfe0a9ad56c9a4c139d81b3c83c1d59f81a711f2240c1f85dd3f516191b91a995352597345a0826ca9efb7e4b2f275480c46
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = f9e92848dc8eaf074d46303e4001692c6d2420b84945a282c79d5f024fa356558975ff7f3a3dfc58de3f0e7d3cb9d3038d7f76d776bcefad7df77adf9cebc695
+SHA512 (linux-4.18.0-553.135.1.el8_10.tar.xz) = 6090fa72b9b10ae334e7f7369410d46ead44f1ee875845b5a74444ff5011deadd1e5153fac65af5dbb73e71e2e94a2c54b78e9783a629f26560c5d5767cd0e3c
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 1984ddebcf3098fd52f8f5f1ea957a25daa2c258012d50678ca7d1090ef91e1e2e142d066aae63964492b7650674968041a4366f607d3b150003724e26021643
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = d6e32e310aa583d437939a5e39e90555745b98229938e376cdad5f9b0372a56806d5fcf3112004a16d75aa7a5a3a0506d11efb31baae85dfb09bad7cfd7b60da