diff --git a/kernel.spec b/kernel.spec
index acadd8e81..06577effc 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.63.1.el8_10
+%define pkgrelease 553.64.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.63.1%{?dist}
+%define specrelease 553.64.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,16 @@ fi
 #
 #
 %changelog
+* Wed Jul 23 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.64.1.el8_10]
+- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919}
+- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256]
+- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977}
+- wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905}
+- workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292]
+- workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292]
+- workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292]
+- workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292]
+
 * Thu Jul 17 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.63.1.el8_10]
 - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154}
 - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086}
diff --git a/sources b/sources
index fb70e01a9..d69ba4fae 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.63.1.el8_10.tar.xz) = fc3738a4a05f88db18172c5758a10f86f801c77170532b044e0105b9a0ae7d0bf6d92f02c738b5705d05a18b43626c030f610ecaf39a7ecea23f97efe97e4744
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = ea1fb3ef1d106ce94000cf3335b1f43bb2f147a84391de38082e7b3edf8a6a7ad107f588d431b474ebd6bd6b4c872bdd24540d40eb4b7423654a9bc2958ce8f5
+SHA512 (linux-4.18.0-553.64.1.el8_10.tar.xz) = 41b14dc763d37e262ed81efb67c128ea4466692248f4465ca937923875302432dfcc4aac5c0fffa51a5f0a698c5f47a5a783a7e89100978bd44a2e382706cc18
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 4262daaf052ab272a0241a154e6c241a880a6d3bceb03d1e997501eab3b7bdc2db583bdc548135829225c1bfdf90236040c6032232cf0185b3b55e2867c339f7
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 79a9788af0c183f670166700354b6a188c176427a6230b8bfaa2cfdc6a4daa1418bbee98d80b7f6b3195043eeef1ffa6782d03b5a1733b65a90c22f66684941f