diff --git a/kernel.spec b/kernel.spec
index 0714246d8..838616aad 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.69.1.el8_10
+%define pkgrelease 553.70.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.69.1%{?dist}
+%define specrelease 553.70.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,15 @@ fi
 #
 #
 %changelog
+* Tue Aug 12 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.70.1.el8_10]
+- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380}
+- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250}
+- net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914}
+- sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717]
+- drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097}
+- s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600]
+- s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600]
+
 * Thu Aug 07 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.69.1.el8_10]
 - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]
 - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]
diff --git a/sources b/sources
index 41a244d6a..54be6d98d 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.69.1.el8_10.tar.xz) = a957c8822f82f29e5135fc439fd42a241f06d460c968660c22361d5166233d5de9b6a470a73eda076c71fb0f146f775b11cc5e10678da84861ae826a2546cf58
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 12aaf96351396fd3a60b2494e9d22b4692dc237ec511a73e69544fef8a72cd4c274e0bcd7ce725a5912ffb632aa558939ed4511441e61b8b1a43fecc42c1fdb5
+SHA512 (linux-4.18.0-553.70.1.el8_10.tar.xz) = c1a95dc8f956e1fee5c711152ef68b53898c5ac43f492463f379a72d4a2cb9ab25f3d13a9ec73fece94ef9c97f9125a5ab64de0da3d5babc4f2ee37a9b996a9c
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = ab7e46a5ca0ea22674c3d3812dfc04db01586eb62725aa7203a253265647aba25a828bf88460dc41777dc90bcbd18d8963bec4cb4611ad08aaf5bb4b83571864
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 79a9788af0c183f670166700354b6a188c176427a6230b8bfaa2cfdc6a4daa1418bbee98d80b7f6b3195043eeef1ffa6782d03b5a1733b65a90c22f66684941f