diff --git a/kernel.spec b/kernel.spec
index 6573b7e2b..972edfd44 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.95.1.el8_10
+%define pkgrelease 553.96.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.95.1%{?dist}
+%define specrelease 553.96.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,13 @@ fi
 #
 #
 %changelog
+* Sat Jan 17 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.96.1.el8_10]
+- Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673}
+- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277}
+- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354]
+- xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354]
+- x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354]
+
 * Thu Jan 15 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.95.1.el8_10]
 - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819]
 - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248}
diff --git a/sources b/sources
index 67696337b..77e9f9087 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.95.1.el8_10.tar.xz) = ed977daed308d448baee1c7d58561f44894a4b9ec3293ecc7805358be0b847b24e23f99da8069ff1a851e76cfe7690b3125758c32137a6f1565fe794bdf3ccde
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 6a25589126e96dcd1ab7f8a335d29408cd10c36c242daa2c06b0a622e2d71538299ea47fd21c6302b5ac8201adaa74ef657b2c33db913962cd96ff68e25b1dbb
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 0adebcbb66fddfb9a05eb2655d72014ebd7065eb6002b6078bde6a0afc0c639dc08b952d59c4bebe95b94881050b2f193c82397a37013a2916a4429e16c227b9
+SHA512 (linux-4.18.0-553.96.1.el8_10.tar.xz) = 8d754687cc588ea76924489d06ce7d76371dd1c2e1b8438ea9b8532507487ec7e141dcab7c86251573200ea5d0b462b3f9cfd7a9dcb1b3884f01f6a86414b4c5
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = bce9b244dfb724def39f29ea880b1effae941ec75023a5ee9ec2a156d3c85f8eecabeca6ab268c1d58495c365dd3004ba81ad0f996508d545b7875833c808ff2
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = f321fd0bf27aef43d3fff46dae71595e0ef558328dc3625a324717e6e06f2cdf3ffdbfa4c1dfdf76167f7896d12e51bf172f96778ecacfd0bbcaf2a4adf4e9a0