diff --git a/kernel.spec b/kernel.spec
index d8f0ace36..6cdb4aa95 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -49,10 +49,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.148.1.el8_10
+%define pkgrelease 553.149.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.148.1%{?dist}
+%define specrelease 553.149.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2723,6 +2723,19 @@ fi
 #
 #
 %changelog
+* Tue Jul 28 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.149.1.el8_10]
+- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
+- fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150}
+
 * Mon Jul 27 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.148.1.el8_10]
 - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006}
 
diff --git a/sources b/sources
index e0f6ec802..a9b9d282a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.148.1.el8_10.tar.xz) = 494de623a317c7923bd3102049e46112342cce7fc232c6dc2ea50265ae0bb5b29855cbd3569a804bf506659282f280bd4b5a427f08208265c81246c9cece44a7
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 5954a4b02afd6f52b1acac7f8f73ca734c419da5f4a8f72bd34aba6d455eb9b29cf82b332ae15b7d3b0ff3d441105bc3124e97c223a698edd870035b06e7ba5a
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 20902f87b77fc8d3a1ae62f99d395b7a975525019dc5d87c384cc74a73674fcde8e9392e87d512c2ab00dc4e33571a98ad94775d41c0202a50b5bc0764fa70c8
+SHA512 (linux-4.18.0-553.149.1.el8_10.tar.xz) = 530496da379764b8bb4c33f535b795e50ff2ce923c543f0a48da17069cbdf9c549321e543f72a9bc1cc90235acb57df21b1bba2fd6ca6eb9197ca001f8f14cc5
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = e39d8172bc85226fdc1cd4d11ff6e3416d29fe97551b47edad9f901bcbcea4b8f817f661a3119b1d6515805fd1ade4e6025c7c722473225d05b80b71997946dd
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = e3691d6f196b73d9dbea165b28dfc24538474031ce1ad195eef673e3386fdfe93c15e73786af622b68a317596107e5561503359001ba26c6c5a2d8e039739d3d