diff --git a/download b/download
index bbe160f59dda7de163f5140e532af826bad4dab2..50510cb5b59e0d87526650c708e3d8c53a129e17 100644
--- a/download
+++ b/download
@@ -1,3 +1,3 @@
-2dbb57e5a178f1d357cc370b799598ce  kernel-abi-stablelists-4.18.0-553.tar.bz2
-559191ff3ea6f1f91b7d06563f479e39  kernel-kabi-dw-4.18.0-553.tar.bz2
-aee73a9937451c09a0084146de731637  linux-4.18.0-553.51.1.el8_10.tar.xz
+071345164f1399488763702dfde08b49  kernel-abi-stablelists-4.18.0-553.tar.bz2
+dacb6c59855053065f7f64fcfb9aa828  kernel-kabi-dw-4.18.0-553.tar.bz2
+270e6f930afc7323822108af09dcf02d  linux-4.18.0-553.52.1.el8_10.tar.xz
diff --git a/kernel.spec b/kernel.spec
index 24449b9a6da1e346975d5309dfa59d941d1e41d1..3266b3b08d73cee9db8828f94ad83c31fe3f4103 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -39,10 +39,10 @@
 # define buildid .local
 
 %define specversion 4.18.0
-%define pkgrelease 553.51.1.el8_10
+%define pkgrelease 553.52.1.el8_10
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 553.51.1%{anolis_release}%{?dist}
+%define specrelease 553.52.1%{anolis_release}%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -577,7 +577,7 @@ Provides: kernel-drm-nouveau = 16\
 Provides: %{name}-uname-r = %{KVERREL}%{?variant}%{?1:+%{1}}\
 Requires(pre): %{kernel_prereq}\
 Requires(pre): %{initrd_prereq}\
-Requires(pre): linux-firmware >= 20200619-99.git3890db36\
+Requires(pre): linux-firmware >= 20220713-109.gitdfa29317\
 %ifnarch s390x\
 Requires(pre): ((grub2 >= 2.02-99) if grub2)\
 Requires(pre): ((grub2-efi >= 2.02-99) if grub2-efi)\
@@ -2699,9 +2699,25 @@ fi
 #
 #
 %changelog
-* Tue May 06 2025 Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 4.18.0-553.51.1.0.1
+* Thu May 15 2025 Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 4.18.0-553.52.1.0.1
 - kernel:repair dwarves causes kernel compilation to fail
 
+* Thu May 01 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.52.1.el8_10.gfd1b]
+- netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141}
+- NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285]
+- idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266]
+- idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266]
+- idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266]
+- idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266]
+- redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342]
+- gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875]
+- gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875]
+- gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875]
+- gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875]
+- gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875]
+- gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875]
+- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011}
+
 * Thu Apr 24 2025 Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.51.1.el8_10]
 - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072]
 - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280]