diff --git a/kernel.spec b/kernel.spec
index cdca658f0..e335c95bb 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.25.1.el8_10
+%define pkgrelease 553.26.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.25.1%{?dist}
+%define specrelease 553.26.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,36 @@ fi
 #
 #
 %changelog
+* Wed Oct 09 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.26.1.el8_10]
+- nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062}
+- cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037]
+- ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156]
+- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757]
+- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757]
+- gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757]
+- gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757]
+- dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492}
+- dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939}
+- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075]
+- NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397]
+- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251]
+- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251]
+- cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251]
+- cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251]
+
 * Wed Oct 02 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.25.1.el8_10]
 - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052]
 - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052]
diff --git a/sources b/sources
index b9ac6c88a..195fde473 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.25.1.el8_10.tar.xz) = 738039a50fb1a1e8c0c706531f79ad9d4b3c7d5e73147f7f1f5fc49ef3b09d0c832d6278a0f57ad6c302c2717ebc6bd7d9855e2a09921d9659833b0e074e99d0
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = fa85538df5e9c14e4fa4bceb53c6e0f936df60fd4034687ff51b9438356dcfb4e4234426fbf35b988baac3fc1e39e105c02bf7f49b2fb5daee4e6988a1184d45
+SHA512 (linux-4.18.0-553.26.1.el8_10.tar.xz) = 500617aff15055e72de39c1dd8175d0293c31d453b59d27daac8c5967037c5b25e777f155ca366a67cbba1a5b544cc57589e0791bcca387ab549f827ba2d1576
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = e0fa8058da162474c32db56ed996d7704ab55ee8da7fd4e1c7608cbb3b5336da80fe01d10ef0af51c03491cfcbaa2b408dcfb30c0a5f2227859487f91438b735
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf