diff --git a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
similarity index 84%
rename from meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb
rename to meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
index f7c0ee0d4f..acff7b548b 100644
--- a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb
+++ b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
@@ -4,8 +4,8 @@ BUGTRACKER = "https://github.com/ngtcp2/ngtcp2/issues"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYING;md5=de0966c8ff4f62661a3da92967a75434"
 
-SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=main;tag=v${PV};name=ngtcp2"
-SRCREV = "2a441e8540d192b0707989b146ce80efcae5f0d6"
+SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=release-1.22;tag=v${PV}"
+SRCREV = "716e64b05f4a3709dfc0b0522cf9fd4456d055e5"
 
 DEPENDS = "brotli libev nghttp3"
 
@@ -18,3 +18,5 @@ PACKAGECONFIG[shared] = "-DENABLE_SHARED_LIB=ON, -DENABLE_SHARED_LIB=OFF"
 PACKAGECONFIG[build-lib-only] = "-DENABLE_LIB_ONLY=ON, -DENABLE_LIB_ONLY=OFF"
 PACKAGECONFIG[openssl] = "-DENABLE_OPENSSL=ON, -DENABLE_OPENSSL=OFF, openssl"
 PACKAGECONFIG[gnutls] = "-DENABLE_GNUTLS=ON, -DENABLE_GNUTLS=OFF, gnutls"
+
+CVE_STATUS[CVE-2026-40170] = "fixed-version: fixed in 1.22.1"