diff --git a/.gitignore b/.gitignore
index eb07966..c18eb5d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 SOURCES/centossecureboot201.cer
 SOURCES/centossecurebootca2.cer
-SOURCES/linux-4.18.0-553.33.1.rt7.374.el8_10.tar.xz
+SOURCES/linux-4.18.0-553.34.1.rt7.375.el8_10.tar.xz
 SOURCES/redhatsecureboot302.cer
 SOURCES/redhatsecureboot303.cer
 SOURCES/redhatsecureboot501.cer
diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata
index 5785f73..881146d 100644
--- a/.kernel-rt.metadata
+++ b/.kernel-rt.metadata
@@ -1,6 +1,6 @@
 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer
 bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer
-727272aa62f65db0438c0758f5ff9fa91d5f6f93 SOURCES/linux-4.18.0-553.33.1.rt7.374.el8_10.tar.xz
+59dd86b8fe98b6b430f7ef92a43d7fbff4b6a37b SOURCES/linux-4.18.0-553.34.1.rt7.375.el8_10.tar.xz
 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer
 e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer
 ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer
diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec
index 01fc603..2eca9bc 100644
--- a/SPECS/kernel.spec
+++ b/SPECS/kernel.spec
@@ -38,10 +38,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.33.1.rt7.374.el8_10
+%define pkgrelease 553.34.1.rt7.375.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.33.1.rt7.374%{?dist}
+%define specrelease 553.34.1.rt7.375%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -148,7 +148,7 @@
 # The preempt RT patch level
 %global rttag .rt7
 # realtimeN
-%global rtbuild .374
+%global rtbuild .375
 %define with_doc 0
 %define with_headers 0
 %define with_cross_headers 0
@@ -2697,6 +2697,17 @@ fi
 #
 #
 %changelog
+* Thu Dec 12 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.34.1.rt7.375.el8_10]
+- [rt] build kernel-rt-4.18.0-553.34.1.rt7.375.el8_10 [RHEL-71211]
+- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122}
+- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647]
+- xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924]
+- KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974]
+- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362]
+- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860]
+- i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
+- i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
+
 * Fri Dec 06 2024 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.33.1.rt7.374.el8_10]
 - [rt] build kernel-rt-4.18.0-553.33.1.rt7.374.el8_10 [RHEL-70219]
 - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073]