diff --git a/kernel.spec b/kernel.spec
index 6d9c47d73..8b758eadb 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -12,7 +12,7 @@
 # change below to w4T.xzdio):
 %define _binary_payload w3T.xzdio
 
-%global distro_build 549
+%global distro_build 550
 
 # Sign the x86_64 kernel for secure boot authentication
 %ifarch x86_64 aarch64 s390x ppc64le
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 549.el8
+%define pkgrelease 550.el8
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 549%{?dist}
+%define specrelease 550%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2695,6 +2695,10 @@ fi
 #
 #
 %changelog
+* Sun Mar 31 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-550.el8]
+- mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489}
+- mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489}
+
 * Thu Mar 28 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-549.el8]
 - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678]
 - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678]
diff --git a/sources b/sources
index 59e333a40..b64758403 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-549.el8.tar.xz) = 5b16b3deea1ae92c86fdcdcee87126af759f15b83f2300f4382fff04c9a6ae230bd40c14746b9795ed22c79ce97e695ce152024268427fd373672a4b070fe3b3
-SHA512 (kernel-abi-stablelists-4.18.0-549.tar.bz2) = 7e3f04a0a1681ac7dceb6f44668983123d688f26d0b335e92f64f4b4817e9191835089ef009fe6b1f363e4f39b5fff141f54bf1ebace3040e3f73203055c857e
-SHA512 (kernel-kabi-dw-4.18.0-549.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf
+SHA512 (linux-4.18.0-550.el8.tar.xz) = 26a261319e9833cdc8b1db9bde2322dd33e0b654de94bed96f6c6de8b626c8d8e0c299ad7e619f31e19de292e266009631714c07f8b0cfb5ea76905cb54d9433
+SHA512 (kernel-abi-stablelists-4.18.0-550.tar.bz2) = dcffd58fc41703afb6fde78cf5a9559b85256faef274011a381f63630dadbfe07dcad4b67dc26aacf612f2e91386f1eb67fffc8621473149411a2fdac5562b97
+SHA512 (kernel-kabi-dw-4.18.0-550.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf