diff --git a/kernel.spec b/kernel.spec
index cae329710..db7fc2cc0 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.132.1.el8_10
+%define pkgrelease 553.133.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.132.1%{?dist}
+%define specrelease 553.133.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2707,6 +2707,9 @@ fi
 #
 #
 %changelog
+* Wed Jun 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.133.1.el8_10]
+- Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786}
+
 * Wed Jun 10 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.132.1.el8_10]
 - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037}
 - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125}
diff --git a/sources b/sources
index 6e678308d..71109d60b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.132.1.el8_10.tar.xz) = 5b41d690db712e857855a6e083ef27ced929f449eb02bd4e08ad93677d7cabb26d0e1dafa88b3c76f9dd9c2b407c94792fc3fdaaa25c0a34430cac2e02e19569
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = f371c3cd8553d392e458917e8f605aeefd812eb04ad2edec2c47d38212907a514ede9dc24c87dc6fed3abefb0799a01ca097863ac622abf6c1390f6e7e92c3b9
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = bc6c172688212ad1ae3e6db20bd7a89a095634bc828b969e0dd5c74661faa6af1a9e0d9cb3f9215d8a89f7c1e8509f26c8f484b9151d5f1f3263ba4a47363f57
+SHA512 (linux-4.18.0-553.133.1.el8_10.tar.xz) = 86340357756dcf1690fc84e2185a06f5b58be6e95ac7fcb61f91d04e34898665fdfdd44ecc69e31066d17d627102d863c781e878e052ce96c396d1ca0b1629b7
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = af3526ab11e6ea3aef2d2edd899bab206c475de0ea732fb59f9579e76c129ba98505d2a7e655990b1629810dc41ab86d34d1547b18572f338ea97233cd279978
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 7bc7c8964833d000540e3a310c73c473da37773d252e42a1cf16b4ee8a4c5b517f46a947f76a46c8a68cf8bcbb388411e4d31a3301164b8293f61e2570abe081