diff --git a/kernel.spec b/kernel.spec
index b00b4e968..f66762d76 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.120.1.el8_10
+%define pkgrelease 553.121.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.120.1%{?dist}
+%define specrelease 553.121.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,9 @@ fi
 #
 #
 %changelog
+* Wed Apr 15 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.121.1.el8_10]
+- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}
+
 * Wed Apr 08 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.120.1.el8_10]
 - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075]
 - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075]
diff --git a/sources b/sources
index d4ccff97c..ee8e8c11a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.120.1.el8_10.tar.xz) = 0456c03f7d1fb255a563adbb2292ebe3c654640eb3e08bc156a0806df68765f9a7b56aff8ae99419059f945afe800c81f61b2ae36f06df6eb08f0449577063fd
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 072f24715a52867a8284521753c31a0f7732d280c5e08644d2b0dd34c4c86df43426dfd863413ae1e2582bce2c2f8169445f2db0540d1e3509635d0c0e0e98af
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = ce1bdb4a398199ca8aa72c7a5a111db55ce3ffe1ffd7e8e33d03431b78840d268d910be8f5a22559c872c140f12cac6d695b038fc2918882cc2d9d7178b62abc
+SHA512 (linux-4.18.0-553.121.1.el8_10.tar.xz) = b6594e3edf326041c26e2b3b6c984c701ace35afa11632da6840adb6970b4484151ce4c979160de1570ff6ea1739cc832b07cca831e5b0156a1363a34eb9b7d0
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = b15248b8f33bb397360611e2cdd077c3c68fcc74a557e5bf1a75cbf12b68974ab878f38428f5ada53a35ad556e622696d2195ba96237ce25b9e811d072854f51
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 2a3b5cd12b958483bee1ab5ee114003f35064caa831c8e29f1d1aa7418c5c3efb9fb571ff4a54dca6d0990e9aa2037fc2c4c2f87307f094a4ba5331ee028980e