diff --git a/changelog/security/2026-11-06-incus-7.5.1.md b/changelog/security/2026-11-06-incus-7.5.1.md
new file mode 100644
index 00000000000..b469ed438f2
--- /dev/null
+++ b/changelog/security/2026-11-06-incus-7.5.1.md
@@ -0,0 +1 @@
+- Incus ([CVE-2026-85185](https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p),[CVE-2026-85526](https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv),[CVE-2026-81500](https://www.cve.org/CVERecord/?id=CVE-2026-81500),[CVE-2026-81501](https://www.cve.org/CVERecord/?id=CVE-2026-81501))
diff --git a/changelog/updates/2026-11-06-incus-7.5.1.md b/changelog/updates/2026-11-06-incus-7.5.1.md
new file mode 100644
index 00000000000..23fe4badddc
--- /dev/null
+++ b/changelog/updates/2026-11-06-incus-7.5.1.md
@@ -0,0 +1 @@
+- sysext-incus: incus ([7.5.1](https://github.com/lxc/incus/releases/#release-v7.5.1))
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 38a78983774..a8abf4ea174 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -37,8 +37,8 @@
 =app-containers/docker-29*
 =app-containers/docker-cli-29*
 
-# To address security issues
-=app-containers/incus-7.4-r1
+# Masked (experimental) in Gentoo
+=app-containers/incus-7.5.1
 
 # Keep versions on both arches in sync.
 =app-containers/lxc-7.0.0