diff --git a/kernel.spec b/kernel.spec
index aa6ccfae2..5415499e2 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.45.1.el8_10
+%define pkgrelease 553.46.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.45.1%{?dist}
+%define specrelease 553.46.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2696,6 +2696,14 @@ fi
 #
 #
 %changelog
+* Thu Mar 13 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.46.1.el8_10]
+- s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934]
+- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934]
+- s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934]
+- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832]
+- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785}
+- nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085]
+
 * Thu Mar 06 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.45.1.el8_10]
 - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269]
 - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269]
diff --git a/sources b/sources
index 4601b58e8..537b472f9 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-4.18.0-553.45.1.el8_10.tar.xz) = 3b767905fda5bf6fe9ad93a1fe3f1f22f390dd6a64ae44d993ce99e57099d620a54b653a14bd6a3743329127817d447c61ffd679be996d85455a562e5997d02d
-SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = d23a0da9bbfe1716aa90c3687c0c4de7fa04a062e2e4134b2cf6a7c005a75eda3543cafc812cc864ce81b914197912ecd288c98869a4795feaddcc5257cfbce5
+SHA512 (linux-4.18.0-553.46.1.el8_10.tar.xz) = 3776e46157269153a1126fa93b32663c2e83d27417babc36f688f7373badd615c7d423a70b8ce6ace0e00231ec19bcbc5d193a1a40b6e7b02ea458104bfcb8ca
+SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 2ef910879af18183d22cd9d70dc7c99575056dff3e41670e74d746af817d4b9f8f9eb116d5542d8d855cda16ec06e0c77e67adbfe81a140189eea97d14d9818d
 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 8a671ed3c9b7f4b25fd4e594b62bc4a26474cb705d3ed22ca376618b3c7962fc72ace1ffd02c9c3a192d9d2c449d38228809542d7f16ebad16f8127020eb2faf