diff --git a/kernel.spec b/kernel.spec
index 6892405e3..447efb61d 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.71.1.el8_10
+%define pkgrelease 553.72.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.71.1%{?dist}
+%define specrelease 553.72.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2705,6 +2705,47 @@ fi
 #
 #
 %changelog
+* Sat Aug 23 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.72.1.el8_10]
+- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332}
+- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371]
+- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211}
+- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696}
+- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285}
+- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
+- net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
+- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976]
+- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894]
+- aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313]
+- filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181]
+- x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369]
+- efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369]
+- efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369]
+- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464}
+- sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758]
+- block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758]
+- blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758]
+- lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758]
+- sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758]
+- sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758]
+- sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758]
+- sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758]
+- sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758]
+- sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758]
+- sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
+- sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758]
+- sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
+- sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
+- lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
+- lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758]
+- sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
+- sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758]
+- wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758]
+- sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758]
+- sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758]
+- sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758]
+- blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758]
+- blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758]
+
 * Fri Aug 15 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.71.1.el8_10]
 - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058}
 - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200}
diff --git a/sources b/sources
index 95fd31a5f..58f59c16c 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.71.1.el8_10.tar.xz) = adb68f41b787d853312412fc04f054d59ff26edddbccf39e6c43894b237b15a7fa366dfc02474761e5d7d5af2c7a9cc40f13b4d9f96004a6ba58df2a20d34ccd
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = f0d66802d474b8845ed686cd2db189c0b9cffc6e9032b89c5cf04115d40586248c522907b39441e8948cd471bce472013eaba2859c25397b60ba48049a14098c
+SHA512 (linux-4.18.0-553.72.1.el8_10.tar.xz) = b09bff550f3f2c6483261821ce7e15afd51034f8792d3d53ddc272589f8771072f55babb08e65bc9c536a7870c24028bb8a366b1d2fd253fafe942e47357a83a
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 9138e58a3f866bb9c4cb3b2551d329e1078a4eb9180121a98c133fbfff4d0e843be69e1235e63794f4f0366e469b882063e9973d54f0d9634cf50b1ebd7ad7c5
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 79a9788af0c183f670166700354b6a188c176427a6230b8bfaa2cfdc6a4daa1418bbee98d80b7f6b3195043eeef1ffa6782d03b5a1733b65a90c22f66684941f