diff --git a/kernel.spec b/kernel.spec
index b9031a6f5..180813789 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.126.1.el8_10
+%define pkgrelease 553.127.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.126.1%{?dist}
+%define specrelease 553.127.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,12 @@ fi
 #
 #
 %changelog
+* Wed May 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.127.1.el8_10]
+- smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781}
+- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366}
+- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984}
+- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990}
+
 * Wed May 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.126.1.el8_10]
 - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772]
 - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772]
diff --git a/sources b/sources
index ddadb75fe..161b63f56 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.126.1.el8_10.tar.xz) = 89aaee3b9b05c7fc027c1de501e0b2069a7a0419951be947560ab809167b0f84a433d50c88cd38a4898ef86cb7936333d93f635f66253d376a3e0aa3229fb79d
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 385c1758c78952e8703b2772b561286db347b1210b3408d227aca32c178c58aadb9cdcd2688d5fcaed98f019865e19b1129ded1cacf471e84628e59a4a17192f
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = f7f5f2c220d2d1d4c5f19d93ccfda7ab83b0da727855fe9ce2abf5e769d91522b5f7e810c76cae84ef9ba84b6ff73caaa7c4545f0497f0d7edd19b019fb4c1c0
+SHA512 (linux-4.18.0-553.127.1.el8_10.tar.xz) = 4649cb0f15d883ff84a8911b8798883672a20e8ab5bf52c2fdb9daa2b9109dcf2d870a2f7cf4812eb4af30849f498118dbcf9813860d596c3ec25b8a605c0d57
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 64b750a5cd23b319c9e857e0b3e7bcfc04b166fe201d290d3e91a5553f25befe453031c2612108d5786d916fa03155407ba51402b22fb1f9d89a075eff608170
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = d5e7cd452bb0de339bbda6fa611f6e79291ec70a64e86bf7fe62cc27b69512d9c23425531fd54d3fd34105e0a9d4b0a12ee4b57af70c449edf5101212dd67486