diff --git a/download b/download
index 9ae8ee72e13201e91179b1feb273d97f25684edc..00f92639beb6f8dcfc482c6d94cd1cb78d81d231 100644
--- a/download
+++ b/download
@@ -1,3 +1,3 @@
 6216437b8c12af39752cd48fd60f8d41  kernel-abi-stablelists-4.18.0-348.tar.bz2
 c5ad1981dad99a05a5b4bf0cac2c57de  kernel-kabi-dw-4.18.0-348.tar.bz2
-804d2c812fe9c104d600864c11f102c7  linux-4.18.0-348.20.1.el8_5.tar.xz
+d1417f7276fb2d0e1d2884f802375a69  linux-4.18.0-348.23.1.el8_5.tar.xz
diff --git a/kernel.spec b/kernel.spec
index 31a3604966d54b17da72373d7d69dd1e6ea5ac4c..1e0ba84fc942541c4a7622ba57dda0ac928720ec 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -42,10 +42,10 @@
 # define buildid .local
 
 %define rpmversion 4.18.0
-%define pkgrelease 348.20.1.el8_5
+%define pkgrelease 348.23.1.el8_5
 
 # allow pkg_release to have configurable %%{?dist} tag
-%define specrelease 348.20.1%{?dist}
+%define specrelease 348.23.1%{?dist}
 
 %define pkg_release %{specrelease}%{?buildid}
 
@@ -2643,6 +2643,22 @@ fi
 #
 #
 %changelog
+* Tue Apr 12 2022 Bruno Meneguele <bmeneg@redhat.com> [4.18.0-348.23.1.el8_5]
+- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]
+
+* Tue Apr 05 2022 Bruno Meneguele <bmeneg@redhat.com> [4.18.0-348.22.1.el8_5]
+- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
+- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
+- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}
+
+* Tue Mar 22 2022 Bruno Meneguele <bmeneg@redhat.com> [4.18.0-348.21.1.el8_5]
+- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
+- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
+- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
+- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
+- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
+- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
+
 * Tue Mar 08 2022 Bruno Meneguele <bmeneg@redhat.com> [4.18.0-348.20.1.el8_5]
 - lib/iov_iter: initialize "flags" in new pipe_buffer (Jan Stancek) [2060874 2060875] {CVE-2022-0847}