diff --git a/.SRCINFO b/.SRCINFO
index 57f6f3d..bf878e8 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,5 @@
-# Generated by mksrcinfo v8
-# Fri Dec 29 23:34:56 UTC 2017
 pkgbase = linux-vfio
-	pkgver = 4.14.9
+	pkgver = 4.14.10
 	pkgrel = 1
 	url = http://www.kernel.org/
 	arch = x86_64
@@ -15,8 +13,8 @@ pkgbase = linux-vfio
 	options = !strip
 	source = https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.14.tar.xz
 	source = https://www.kernel.org/pub/linux/kernel/v4.x/linux-4.14.tar.sign
-	source = https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.14.9.xz
-	source = https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.14.9.sign
+	source = https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.14.10.xz
+	source = https://www.kernel.org/pub/linux/kernel/v4.x/patch-4.14.10.sign
 	source = config
 	source = 60-linux.hook
 	source = 90-linux.hook
@@ -29,9 +27,11 @@ pkgbase = linux-vfio
 	source = 0001-Revert-xfrm-Fix-stack-out-of-bounds-read-in-xfrm_sta.patch
 	source = 0002-xfrm-Fix-stack-out-of-bounds-read-on-socket-policy-l.patch
 	source = 0003-cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch
+	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
+	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha256sums = f81d59477e90a130857ce18dc02f4fbe5725854911db1e7ba770c7cd350f96a7
 	sha256sums = SKIP
-	sha256sums = 5edc955bb67b04c7ed426b1df17a3e322e32ad9fdda9c6abb53ab6eca7faf704
+	sha256sums = 16f560aa713b46c707f04a226f67dc31fdd280aae57dd19e0413d61df5336c74
 	sha256sums = SKIP
 	sha256sums = 4d12ed868b05720c3d263c8454622c67bdee6969400049d7adac7b00907ad195
 	sha256sums = ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21
diff --git a/PKGBUILD b/PKGBUILD
index 703bad9..ef3117c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgbase=linux-vfio
 _srcname=linux-4.14
-pkgver=4.14.9
+pkgver=4.14.10
 pkgrel=1
 arch=('x86_64')
 url="http://www.kernel.org/"
@@ -33,7 +33,7 @@ source=("https://www.kernel.org/pub/linux/kernel/v4.x/${_srcname}.tar.xz"
         0003-cgroup-fix-css_task_iter-crash-on-CSS_TASK_ITER_PROC.patch)
 sha256sums=('f81d59477e90a130857ce18dc02f4fbe5725854911db1e7ba770c7cd350f96a7'
             'SKIP'
-            '5edc955bb67b04c7ed426b1df17a3e322e32ad9fdda9c6abb53ab6eca7faf704'
+            '16f560aa713b46c707f04a226f67dc31fdd280aae57dd19e0413d61df5336c74'
             'SKIP'
             '4d12ed868b05720c3d263c8454622c67bdee6969400049d7adac7b00907ad195'
             'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21'
@@ -59,6 +59,7 @@ prepare() {
 
   # add upstream patch
   patch -p1 -i ../patch-${pkgver}
+  chmod +x tools/objtool/sync-check.sh  # GNU patch doesn't support git-style file mode
 
   # security patches