diff --git a/kernel.spec b/kernel.spec
index 38a067dcb..db2351e39 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.66.1.el8_10
+%define pkgrelease 553.67.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.66.1%{?dist}
+%define specrelease 553.67.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,16 @@ fi
 #
 #
 %changelog
+* Thu Jul 31 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.67.1.el8_10]
+- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
+- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
+- mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
+- mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
+- mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
+- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727}
+- redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek)
+- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912]
+
 * Mon Jul 28 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.66.1.el8_10]
 - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001}
 - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000}
diff --git a/sources b/sources
index 270e17f3e..56a2c2a0c 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.66.1.el8_10.tar.xz) = 27b9ccb4b8f0e9eaf0bd97909ec3d67a27d08ab06a13d4758efdd01a095c26342290a0de97e2bdb16f5ebbdcdc54549a9acd7665717cdaa36e790eff2f523aa8
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = a5310b621b14e38c616d690f2aa348bf3ba880f556bf871787d6ccb1563ec2214f11dd729b03850a1a6994611698e62cb1185cbef2787f46a29eb5441ce365b9
+SHA512 (linux-4.18.0-553.67.1.el8_10.tar.xz) = ea674a7a6e956dbf2530489a63ac900b88accc4b5e916d4c068fc53a113c26dbedbb963841e5ca865356a4ba3348ab50acad8a9f6eed96e0810ca6b06c4796bd
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 659fc9e01d070175b29b643de6ba5e7ab0e6c29643cef042702af222deef16402fa8aa8b59f0808e9228011a974d1e612e1e94f8f34c7708e3173e01daa27949
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 79a9788af0c183f670166700354b6a188c176427a6230b8bfaa2cfdc6a4daa1418bbee98d80b7f6b3195043eeef1ffa6782d03b5a1733b65a90c22f66684941f