diff --git a/download b/download
index 0945e9a216f37a7bc702c78718ebbd64492aec47..ea3865f0f2ea74ff1af2f53ac85379404b7ca774 100644
--- a/download
+++ b/download
@@ -1,3 +1,3 @@
 dd4c41c2b2b5e2237fa63282e7bbdd7c  kernel-abi-whitelists-1160.tar.bz2
 85ce224ff3a41d590b5d0a5f7aa08bab  kernel-kabi-dw-1160.tar.bz2
-af76487375966bf029f4cfe2b5b05fbc  linux-3.10.0-1160.132.1.el7.tar.xz
+9ed77da3d1d0e3aee94414ace3176e36  linux-3.10.0-1160.133.1.el7.tar.xz
diff --git a/kernel.spec b/kernel.spec
index 0d9256f181f98189a08e38b2b5deceb40a3229c2..13ae670d448dad5cb76201dd0cdfc34371c046d1 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -20,10 +20,10 @@ Summary: The Linux kernel
 %global distro_build 1160
 
 %define specversion 3.10.0
-%define pkgrelease 1160.132.1.el7
+%define pkgrelease 1160.133.1.el7
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 1160.132.1%{?dist}
+%define specrelease 1160.133.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -1827,6 +1827,9 @@ fi
 %kernel_variant_files %{with_kdump} kdump
 
 %changelog
+* Mon Apr 7 2025 zhuhongbo <zhuhongbo@uniontech.com> - [3.10.0-1160.133.1.an7]
+- cve: fix CVE-2023-52922 CVE-2024-50302 CVE-2024-53197
+
 * Mon Mar 17 2025 zhuhongbo <zhuhongbo@uniontech.com> - [3.10.0-1160.132.1.an7]
 - Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format