diff --git a/kernel.spec b/kernel.spec
index 65bfbbb6f..ba1e32fea 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.39.1.el8_10
+%define pkgrelease 553.40.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.39.1%{?dist}
+%define specrelease 553.40.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,9 @@ fi
 #
 #
 %changelog
+* Thu Feb 06 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.40.1.el8_10]
+- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104}
+
 * Fri Jan 31 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.39.1.el8_10]
 - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915]
 
diff --git a/sources b/sources
index e7eb940e4..351929233 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.39.1.el8_10.tar.xz) = 57909f024bb50b80de7434c8c9402ce4c7beb6e3e60209a83f11e2549943e8ac3a8b0b1657fcdb6c62ea95b564bf5adac055bceea1056053cf98c6c6b84cd2a6
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = c8b9ee070e7d76b7cc6075b1344ce730e1f773f79a598c3419e348837c673b5e8419a9b996657f09def8e055a894a45d848e89cb21ae74012c7715ec3d1025e8
+SHA512 (linux-4.18.0-553.40.1.el8_10.tar.xz) = 89ea27a7fda81a200dc9e986cbeb6dcceb178bd807f04bb13dec27dc8d9ac525cab8a6fb2eb65f0f0c943a6a5521ee48f95ac3308506a238da08d0c1d0e89d03
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 5dea91305ecf45832f5ac5ac86e70c25f1c37a58f0f5edb25364beb6868f832937383e07d272f82b21d44b1d1aca04d2e35a63831df805d5c8c846f52fd92e6f
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf