diff --git a/debian/changelog b/debian/changelog
index 7402c2ade..9ad9c7a25 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,17 @@
-linux (4.0-1~exp2) UNRELEASED; urgency=medium
+linux (4.0.1-1~exp1) UNRELEASED; urgency=medium
 
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-4.0.1
+    - udptunnels: Call handle_offloads after inserting vlan tag.
+    - tcp: tcp_make_synack() should clear skb->tstamp
+    - bnx2x: Fix busy_poll vs netpoll
+    - bpf: fix verifier memory corruption
+    - Revert "net: Reset secmark when scrubbing packet"
+    - skbuff: Do not scrub skb mark within the same name space
+    - fs: take i_mutex during prepare_binprm for set[ug]id executables
+      (CVE-2015-3339)
+
+  [ Ben Hutchings ]
   * debian.py,gencontrol.py: Fix the version sanity checks for backports and
     security/LTS uploads