diff --git a/kernel.spec b/kernel.spec
index 5b08e0f9d..2da77e1e7 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.97.1.el8_10
+%define pkgrelease 553.98.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.97.1%{?dist}
+%define specrelease 553.98.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,17 @@ fi
 #
 #
 %changelog
+* Thu Jan 22 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.98.1.el8_10]
+- vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790]
+- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
+- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
+- Backport 'create an empty changelog file when changing its name' (Alexandra Hájková)
+- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
+- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
+- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
+- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
+- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}
+
 * Tue Jan 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.97.1.el8_10]
 - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154}
 
diff --git a/sources b/sources
index 35a528e72..5e169e0f3 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.97.1.el8_10.tar.xz) = f23977689d828aef118c847967524cafa0a3a7bcaf93dd3e21001ec2b41741e0cae7817b77bd7a4202a3d97faae11aabcfea415fa4625e4b39489b2b65b42dbd
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 593a7dcad1679176252697db059b616985caea946eef8e93e21899a0dd0e607af1846e23e9971bd1b8f552bce760114e08a34bc6c692e11ada4ac10e3317e585
-SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = b20a1d4a5bdb90f09ddb9d6bf624ab5243c32df10e85e17ecc79c12061a368f5687e6ffb027b01074d6510886df629a8c760dae9f17ceef9bd2c9c8e2b8dd1c3
+SHA512 (linux-4.18.0-553.98.1.el8_10.tar.xz) = 1dbe9e2023c39fd264883936e9d0d668a251d933956e06a9763bdfa51c9aea0008f094d2c9cd2da5dda7e02a5b1abe1e956f649eff56a6da363ac99ed2441e07
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = a0cfedd85401c5ab4c955262935102aa9a7dae6e7ca86de906fb500d320a304e2fbab46c5f7370a64884dc1124603cc1df68910366477033a580d5e0e9899b81
+SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 7fd6da3e4bd534f168eaec6fe40acfe3d6c1c82d8fc7460c6e0fb3c0bc18b437f63984d2cc94cd50fbb3c9f62b5c12342427c52878263370cf950f52e3e0fd8f