diff --git a/kernel.spec b/kernel.spec
index f972c4643..9f0c20f68 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.135.1.el8_10
+%define pkgrelease 553.136.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.135.1%{?dist}
+%define specrelease 553.136.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,15 @@ fi
 #
 #
 %changelog
+* Thu Jun 18 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.136.1.el8_10]
+- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
+- net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
+- net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
+- net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
+- net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
+- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135}
+- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056}
+
 * Wed Jun 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.135.1.el8_10]
 - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488}
 - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520]
diff --git a/sources b/sources
index adba43919..c91ff83fb 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.135.1.el8_10.tar.xz) = 6090fa72b9b10ae334e7f7369410d46ead44f1ee875845b5a74444ff5011deadd1e5153fac65af5dbb73e71e2e94a2c54b78e9783a629f26560c5d5767cd0e3c
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 1984ddebcf3098fd52f8f5f1ea957a25daa2c258012d50678ca7d1090ef91e1e2e142d066aae63964492b7650674968041a4366f607d3b150003724e26021643
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = d6e32e310aa583d437939a5e39e90555745b98229938e376cdad5f9b0372a56806d5fcf3112004a16d75aa7a5a3a0506d11efb31baae85dfb09bad7cfd7b60da
+SHA512 (linux-4.18.0-553.136.1.el8_10.tar.xz) = a3fba6db4d03af1d8b5d8022c00b31fc851c956f418f294676ff88d4d18dd957d782692c1be5f9d5efd30165dd8dae2fbb766b2706d38f880d1d10017b31298d
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 4fcdf4f92db5f62cb030d840d69bb22e8f78ce772cd9940093ce331a6165db1c45d16b56718317d069832f293fa158edc2fafd6fefd3af1febdb8d32e17ac2d6
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 3d23edda53198f458eaf2fc646054efccde1b8e32482c1dedbed566389862acfc70b53fd451f0657ab9a207604fdaeda41117e1285c44d81e57fd5c89233426f