Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-325.221.6.1]
- x86/kexec: Add EFI config table identity mapping for kexec kernel (Tao Liu) [Orabug: 40127851]
- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (Sean Christopherson) [Orabug: 40127747] {CVE-2026-80726}

[5.15.0-325.221.6]
- scsi: qla2xxx: Preserve PURLS head on reject (Vijayendra Suman) [Orabug: 40088703]
- net: Account VLAN RPS drops (Vijayendra Suman) [Orabug: 40088694]
- net: tun: set drop reason for truncated raw TUN packets (Vijayendra Suman) [Orabug: 40088685]
- IB/mlx4: delete allocated id_map_entry while sending REJ (Praveen Kumar Kannoju) [Orabug: 40002252]
- scsi: target: iblock: Allow iblock devices to be shared (Mike Christie) [Orabug: 39226785]
- scsi: target: core: Fix complete_type use (Mike Christie) [Orabug: 39226785]
- scsi: vhost-scsi: Report direction completion support (Mike Christie) [Orabug: 39226785]
- scsi: target: Allow userspace to set the completion type (Mike Christie) [Orabug: 39226785]
- scsi: target: Use driver completion preference by default (Mike Christie) [Orabug: 39226785]
- scsi: target: Add support for completing commands from backend context (Mike Christie) [Orabug: 39226785]
- scsi: target: Move LUN stats to per-CPU (Mike Christie) [Orabug: 39226785]
- scsi: target: Create and use macro helpers for per-CPU stats (Mike Christie) [Orabug: 39226785]
- scsi: target: Fix LUN/device R/W and total command stats (Mike Christie) [Orabug: 39226785]
- scsi: target: Move delayed/ordered tracking to per CPU (Mike Christie) [Orabug: 39226785]
- scsi: target: Fix ordered CMD_T_SENT handling (Mike Christie) [Orabug: 39226785]
- scsi: target: Move I/O path stats to per CPU (Mike Christie) [Orabug: 39226785]
- KVM: x86: Reset last_steal on vCPU pid change (Dongli Zhang) [Orabug: 39592756]
- bpftool: remove duplicate free_btf_vmlinux() definition (Suraj Jitindar Singh) [Orabug: 40083890]
- Revert 'bpftool: Update btf_dump__new() and perf_buffer__new_raw() calls' (Vijayendra Suman) [Orabug: 40084576]
- LTS version: v5.15.221 (Vijayendra Suman)
- clk: qcom: gdsc: Bump parent usage count when GDSC is found enabled (Bjorn Andersson)
- nvmet-rdma: fix queue leak when connect backlog is exceeded (Xixin Liu)
- kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c (Catalin Marinas)
- kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings (Catalin Marinas)
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link (Zhang Chen)
- ALSA: control: Fix unannotated kfree() cleanup (Takashi Iwai)
- HID: fix an error code in hid_check_device_match() (Dan Carpenter)
- clk: qcom: Drop mmcx gdsc supply for dispcc and videocc (Abel Vesa)
- nvme: target: rdma: fix ndev refcount leak on queue connect (Wentao Liang)
- net/sched: sch_htb: limit htb_classify inner-class filter hops (Jamal Hadi Salim)
- tcp: fix corruption of urgent data on multi-segment retransmit (Jiayuan Chen)
- usb: atm: usbatm: fix invalid ci_range initialization (Deepanshu Kartikey)
- net: fec: only stop PTP if it was initialized (bui duc phuc)
- net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (Jamal Hadi Salim)
- net: stmmac: selftests: Account for the UC filter list for filtering tests (Maxime Chevallier)
- net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: dwmac4: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: selftests: Check multiple MMC counters (Maxime Chevallier)
- selftests/arm64: Treat KSM merge_across_nodes as optional (Muhammad Usama Anjum)
- selftests/arm64: Print missing MTE TAP headers (Muhammad Usama Anjum)
- selftests: arm64: add hugetlb mte tests (Yang Shi)
- netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() (Pablo Neira Ayuso)
- netfilter: xt_HL: add pr_fmt and checkentry validation (Marino Dzalto)
- netfilter: xt_cgroup: Make it independent from net_cls (Michal Koutny)
- netfilter: nf_tables: move hardware offload step after building the chain blob (Pablo Neira Ayuso)
- net: stmmac: selftests: Pass the IP proto mask in the TC selftest (Maxime Chevallier)
- net: ethernet: sun4i-emac: Fix IRQ error handling (bui duc phuc)
- libceph: validate banner payload length (Aleksandr Nogikh)
- ASoC: dapm: Fix off-by-one check on the second enum channel (HyeongJun An)
- apparmor: policy_int make sure list heads are initialized before fail path (John Johansen)
- apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init (Thorsten Blum)
- tpm: st33zp24: Validate locality read result (Ruoyu Wang)
- tpm: st33zp24: Return zero on status read failure (Ruoyu Wang)
- net/sched: sch_teql: restore skb->dev on the slave failure path (Victor Nogueira)
- net/sched: sfq: clamp quantum to avoid signed overflow soft lockup (Jamal Hadi Salim)
- net/sched: hhf: clamp quantum before hhf_change() to avoid overflow (Jamal Hadi Salim)
- net/sched: fq_pie: clamp default quantum to avoid signed overflow (Jamal Hadi Salim)
- net/sched: sch_codel: clamp default mtu to avoid disabling CoDel (Jamal Hadi Salim)
- net/sched: fq_codel: clamp default quantum and mtu (Jamal Hadi Salim)
- net_sched: export pfifo_fast prio2band[] (Eric Dumazet)
- net_sched: sch_fq: change how @inactive is tracked (Eric Dumazet)
- net_sched: sch_fq: struct sched_data reorg (Eric Dumazet)
- net: ip6_gre: Remove the unused function ip6gre_tnl_addr_conflict() (Jiapeng Chong)
- net/sched: act_skbmod: fix length calculations and avoid invalid header warnings (Eric Dumazet)
- cifs: fix clearing stats for fastest execution of each smb2 command (Frank Sorenson)
- octeontx2-af: Fix TL3/TL2 link config ENA clearing (Naveen Mamindlapalli)
- net: qualcomm: rmnet: restore skb->dev on deaggregated frames (Xiang Mei)
- gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (Cen Zhang (Microsoft))
-