diff --git a/kernel.spec b/kernel.spec
index 1f9f9f247..4738a3b07 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.21.1.el8_10
+%define pkgrelease 553.22.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.21.1%{?dist}
+%define specrelease 553.22.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,9 @@ fi
 #
 #
 %changelog
+* Wed Sep 11 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.22.1.el8_10]
+- wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071}
+
 * Wed Sep 04 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.21.1.el8_10]
 - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874]
 - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265}
diff --git a/sources b/sources
index 5f2ad6195..16429dc09 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.21.1.el8_10.tar.xz) = bb51a6fa869368e8da6430d1c75f8a690c5390376f53148c96616e29ec9138f4aea6ae1a0ce9f407d9158bcd57236145d0d615762a057f2cf25478d71213e217
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 3fe05ed0ef4ee06becbdd967cb3c6ba325f9b577f0e8a3aee94d28019a9d13a11696936454fb7ff6860fd855149c82e25a5d1e0e8aea326ae50b54ec78bb448e
+SHA512 (linux-4.18.0-553.22.1.el8_10.tar.xz) = 6cf1d69cc0d72a300b56b036321b43ad63d124e3c3549f079144aa212fa4cb3347d7c674991987061e024a013b826b6e4bfde84b54c8da436546b30cbd14eb8e
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = ce686f2cfaaf5bc4e99005586dbf2878d47a25d9680de97bee62281e5a26eac0ffe633ce418463dd9f0ba1f42238fba73700293a47ae153d38ef2305b809933d
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf