diff --git a/kernel.spec b/kernel.spec
index d6e0f91b4..68d8a0c26 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.88.1.el8_10
+%define pkgrelease 553.89.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.88.1%{?dist}
+%define specrelease 553.89.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,13 @@ fi
 #
 #
 %changelog
+* Sat Nov 29 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.89.1.el8_10]
+- mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
+- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
+- mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
+- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
+- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]
+
 * Thu Nov 27 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.88.1.el8_10]
 - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
 - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
diff --git a/sources b/sources
index 2657a2c89..2cd6cf462 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.88.1.el8_10.tar.xz) = 3243cd6afd9ef408c99b2412e1e7086b98e32cf0395a7f53dbb85d47a02aa34dba1a6d6098dde1ae8827f241301e43e740ea7534c74cfe181dbbe328699a427d
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = b9c7ee2ef2c0b5cac865fec7584a5f26e38a29fe5c473afdceb171715c6e6d483604c0d1faeb60c997a58b3b8bbbeaa30ae56fb810405f96e7a40853d10b0ab2
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 4d68b2584095dc3170cb083be98d2062292fcc49d942ec8afa231e3e2960b80acbfe809a39381dcbee3045fcd898854be1e6df7ce7e1bd0cfae958ee9ac4112d
+SHA512 (linux-4.18.0-553.89.1.el8_10.tar.xz) = 84ddf68c20e6c6489415c617e918f6ec1e221ff11e68c419244de4fa114d6c2e47cf7a2795574643201de7652ad15f976d70f67c72469cad175a00fbb206e1cb
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = c46857ffd7094403206a9cb81c2945fa56dfbd35f80915a2c211e732f2372f485217e7a6e60c955cc09c18ad5fd7f41d4c09e2983a21f3f448c8d9b41c49fd5b
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 89b34077a457468bed3161f3720dcba04c1214b9456393d86daa6e6ee1b40b0a52ccebc5d4e3ade80fe9491e32922b85525cf0a695e62ad7438bc2737e368fee