Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-3.60.5.1]
- fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465]
- vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465]
- dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465]
- fs: do not compare against ->llseek (Jason A. Donenfeld) [Orabug: 34721465]
- fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld) [Orabug: 34721465]

[5.15.0-3.60.5]
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek) [Orabug: 34605427]
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli) [Orabug: 34596909]

[5.15.0-3.60.4]
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [Orabug: 34513977]
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour) [Orabug: 34538054]
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour) [Orabug: 34538054]
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour) [Orabug: 34538054]
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34566751] {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) [Orabug: 34567776]
cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34567776]

[5.15.0-3.60.3]
- audit: annotate branch direction for audit_in_mask() (Ankur Arora) [Orabug: 34544783]
- audit: cache ctx->major in audit_filter_syscall() (Ankur Arora) [Orabug: 34544783]

[5.15.0-3.60.2]
- LTS version: v5.15.60 (Jack Vogel)
- x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta)
- x86/speculation: Add RSB VM Exit protections (Daniel Sneddon)
- macintosh/adb: fix oob read in do_adb_query() function (Ning Qiang)
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 (Hilda Wu)
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 (Hilda Wu)
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 (Hilda Wu)
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 (Hilda Wu)
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 (Hilda Wu)
- Bluetooth: btusb: Add support of IMC Networks PID 0x3568 (Aaron Ma)
- dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding (Ahmad Fatoum)
- Bluetooth: hci_bcm: Add DT compatible for CYW55572 (Hakan Jansson)
- Bluetooth: hci_bcm: Add BCM4349B1 variant (Ahmad Fatoum)
- btrfs: zoned: fix critical section of relocation inode writeback (Naohiro Aota)
- btrfs: zoned: prevent allocation from previous data relocation BG (Naohiro Aota)
- arm64: set UXN on swapper page tables (Peter Collingbourne)
- KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (Mingwei Zhang)
- selftests: KVM: Handle compiler optimizations in ucall (Raghavendra Rao Ananta)
- tools/kvm_stat: fix display of error when multiple processes are found (Dmitry Klochkov)
- KVM: selftests: Make hyperv_clock selftest more stable (Vitaly Kuznetsov)
- KVM: x86: do not set st->preempted when going back to user space (Paolo Bonzini)
- KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571000] {CVE-2022-39189}
- crypto: arm64/poly1305 - fix a read out-of-bound (GUO Zihua)
- ACPI: APEI: Better fix to avoid spamming the console with old error logs (Tony Luck)
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only (Werner Sembach)
- ACPI: video: Force backlight native for some TongFang devices (Werner Sembach)
- tools/vm/slabinfo: Handle files in debugfs (Stephane Graber)
- block: fix default IO priority handling again (Jan Kara)
- selftests/bpf: Check dst_port only on the client socket (Jakub Sitnicki)
- selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads (Jakub Sitnicki)
- x86/speculation: Make all RETbleed mitigations 64-bit only (Ben Hutchings)
- LTS version: v5.15.59 (Jack Vogel)
- x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Thadeu Lima de Souza Cascardo)
- docs/kernel-parameters: Update descriptions for 'mitigations=' param with retbleed (Eiichi Tsukata)
- EDAC/ghes: Set the DIMM label unconditionally (Toshi Kani)
- ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (Florian Fainelli)
- page_alloc: fix invalid watermark check on a negative value (Jaewon Kim)
- mm/hmm: fault non-owner device private entries (Ralph Campbell)
- ARM: crypto: comment out gcc warning that breaks clang builds (Greg Kroah-Hartman)
- sctp: leave the err path free in sctp_stream_init to sctp_stream_free (Xin Long)
- sfc: disable softirqs for ptp TX (Alejandro Lucero)
- perf symbol: Correct address for bss symbols (Leo Yan)
- virtio-net: fix the race between refill work and close (Jason Wang)
- netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham)
- sctp: fix sleep in atomic context bug in timer handlers (Duoming Zhou)
- i40e: Fix interface init with MSI interrupts (no MSI-X) (Michal Maloszewski)
- ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. (Kuniyuki Iwashima)
- tcp: Fix data-races around sysctl_tcp_reflect_tos. (Kuniyuki Iwashima)
- tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. (Kuniyuki Iwashima)
- tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. (Kuniyuki Iwashima)
- tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. (Kuniyuki Iwashima)
- net: Fix data-races around sysctl_[rw]mem(_offset)?. (Kuniyuki Iwashima)
- tcp: Fix data-races around sk_pacing_rate. (Kuniyuki Iwashima)
- net: mld: fix reference count leak in mld_{query | report}_work() (Taehee Yoo)
- net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() (Jianglei Nie)
- macsec: always read MACSEC_SA_ATTR_PN as a u64 (Sabrina Dubroca)
- macsec: limit replay window size with XPN (Sabrina Dubroca)
- macsec: fix error message in macsec_add_rxsa and _txsa (Sabrina Dubroca)
- macsec: fix NULL deref in macsec_add_rxsa