Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-207.156.6]
- uek-container: Add advanced routing options (Boris Ostrovsky) [Orabug: 36691279]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655468]
- slub: introduce count_partial_free_approx() (Jianfeng Wang) [Orabug: 36655468]
- Revert 'lockd: introduce safe async lock op' (Chuck Lever)
- Revert 'tracing/trigger: Fix to return error if failed to alloc snapshot' (Siddh Raman Pant)
- x86/bugs: Fix BHI retpoline check (Josh Poimboeuf)
- keys: Fix overwrite of key expiration on instantiation (Silvio Gissi)
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)
- Revert 'usb: cdc-wdm: close race between read and workqueue' (Greg Kroah-Hartman)
- Revert 'crypto: api - Disallow identical driver names' (Greg Kroah-Hartman)
- netfilter: br_netfilter: skip conntrack input hook for promisc packets (Pablo Neira Ayuso)
- Revert 'Revert 'ACPI: CPPC: Use access_width over bit_width for system memory accesses'' (Easwar Hariharan)
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan)
- Reapply 'drm/qxl: simplify qxl_fence_wait' (Linus Torvalds)
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))

[5.15.0-207.156.5]
- cpu: Re-enable CPU mitigations by default for !X86 architectures (Sean Christopherson) [Orabug: 36682142]

[5.15.0-207.156.4]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan) [Orabug: 36531127]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan) [Orabug: 36531127]
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [Orabug: 36674308]
- uek-rpm: re-enable HP_WMI and HP_ACCEL (Stephen Brennan) [Orabug: 36632743]
- mmc: core: Avoid negative index with array access (Mikko Rapeli) [Orabug: 36554507]
- Revert 'Revert 'mmc: core: Use mrq.sbc in close-ended ffu'' (Thomas Tai) [Orabug: 36554507]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK7 (Jianfeng Wang) [Orabug: 36460674]
- fgraph: Add declaration of 'struct fgraph_ret_regs' (Steven Rostedt (Google)) [Orabug: 36460674]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460674]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460674]
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng) [Orabug: 36460674]
- function_graph: Support recording and printing the return value of function (Donglin Peng) [Orabug: 36460674]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje) [Orabug: 35830448]

[5.15.0-207.156.3]
- scripts/gdb: Fix gdb 'lx-symbols' command (Khalid Masum) [Orabug: 36651773]
- module: Fix prefix for module.sig_enforce module param (Saravana Kannan) [Orabug: 36651773]

[5.15.0-207.156.2]
- LTS version: v5.15.156 (Vijayendra Suman)
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (Ville Syrjala)
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (Arnd Bergmann)
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz)
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Sean Christopherson)
- perf/x86: Fix out of range data (Namhyung Kim)
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)
- drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjala)
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)
- iommu/vt-d: Allocate local memory for page request queue (Jacob Pan)
- tracing: hide unused ftrace_event_id_fops (Arnd Bergmann)
- net: ena: Fix incorrect descriptor free behavior (David Arinzon)
- net: ena: Wrong missing IO completions check order (David Arinzon)
- net: ena: Fix potential sign extension issue (David Arinzon)
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj)
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)
- net: dsa: mt7530: trap link-local frames regardless of ST Port State (Arinc UNAL)
- net: sparx5: fix wrong config being used when reconfiguring PCS (Daniel Machon)
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)
- netfilter: complete validation of user input (Eric Dumazet)
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)
- octeontx2-af: Fix NIX SQ mode and BP config (Geetha sowjanya)
- af_unix: Clear stale u->oob_skb. (Kuniyuki Iwashima)
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet)
- u64_stats: Disable preemption on 32bit UP+SMP PREEMPT_RT during updates. (Sebastian Andrzej Siewior)
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Dan Carpenter)
- nouveau: fix function cast warning (Arnd Bergmann)
- Revert 'drm/qxl: simplify qxl_fence_wait' (Alex Constantino)
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (Frank Li)
- media: cec: core: remove length check of Timer Status (Nini Song)
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)
- ring-buffer: Only update pages_touched when a new page is touched (Steven Rostedt (Google))
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)
- LTS version: v5.15.155 (Vijayendra Suman)
- Revert 'ACPI: CPPC: Use access_width over bit_width for system memory accesses' (Greg Kroah-Hartman)
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)
- Bluetooth: b