Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-325.221.6.2]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39784995] {CVE-2026-46242}
- eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39784995]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39784995]
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39784995]
- eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39784995]
- eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39784995]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39784995]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [Orabug: 39784995]
- file: add fput() cleanup helper (Christian Brauner) [Orabug: 39784995]
- landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (Gunther Noack) [Orabug: 40021203] {CVE-2026-89560}
- ppp_synctty: ensure a writeable skb header (Qingfang Deng) [Orabug: 40079220] {CVE-2026-97964}
- netfilter: nfnetlink_log: cope with concurrent instance destruction (Florian Westphal) [Orabug: 40079360] {CVE-2026-97998}
- vxlan: reject dynamic fdb entries that reference a nexthop id (Seungwon Bae) [Orabug: 40079448] {CVE-2026-98023}
- ipvs: fix reversed sequence option serialization (Kyle Zeng) [Orabug: 40079626] {CVE-2026-98078}
- ipv6: sr: restore network header before routing and forwarding (Eric Dumazet) [Orabug: 40079700] {CVE-2026-98096}
- hsr: broadcast netlink notifications in the device's net namespace (Maoyi Xie) [Orabug: 40073495] {CVE-2026-97419}
- fs/ntfs3: validate index entry key bounds (ZhengYuan Huang) [Orabug: 40073603] {CVE-2026-97438}

[5.15.0-325.221.6.1]
- x86/kexec: Add EFI config table identity mapping for kexec kernel (Tao Liu) [Orabug: 40127851]
- KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page (Sean Christopherson) [Orabug: 40127747] {CVE-2026-80726}

[5.15.0-325.221.6]
- scsi: qla2xxx: Preserve PURLS head on reject (Vijayendra Suman) [Orabug: 40088703]
- net: Account VLAN RPS drops (Vijayendra Suman) [Orabug: 40088694]
- net: tun: set drop reason for truncated raw TUN packets (Vijayendra Suman) [Orabug: 40088685]
- IB/mlx4: delete allocated id_map_entry while sending REJ (Praveen Kumar Kannoju) [Orabug: 40002252]
- scsi: target: iblock: Allow iblock devices to be shared (Mike Christie) [Orabug: 39226785]
- scsi: target: core: Fix complete_type use (Mike Christie) [Orabug: 39226785]
- scsi: vhost-scsi: Report direction completion support (Mike Christie) [Orabug: 39226785]
- scsi: target: Allow userspace to set the completion type (Mike Christie) [Orabug: 39226785]
- scsi: target: Use driver completion preference by default (Mike Christie) [Orabug: 39226785]
- scsi: target: Add support for completing commands from backend context (Mike Christie) [Orabug: 39226785]
- scsi: target: Move LUN stats to per-CPU (Mike Christie) [Orabug: 39226785]
- scsi: target: Create and use macro helpers for per-CPU stats (Mike Christie) [Orabug: 39226785]
- scsi: target: Fix LUN/device R/W and total command stats (Mike Christie) [Orabug: 39226785]
- scsi: target: Move delayed/ordered tracking to per CPU (Mike Christie) [Orabug: 39226785]
- scsi: target: Fix ordered CMD_T_SENT handling (Mike Christie) [Orabug: 39226785]
- scsi: target: Move I/O path stats to per CPU (Mike Christie) [Orabug: 39226785]
- KVM: x86: Reset last_steal on vCPU pid change (Dongli Zhang) [Orabug: 39592756]
- bpftool: remove duplicate free_btf_vmlinux() definition (Suraj Jitindar Singh) [Orabug: 40083890]
- Revert 'bpftool: Update btf_dump__new() and perf_buffer__new_raw() calls' (Vijayendra Suman) [Orabug: 40084576]
- LTS version: v5.15.221 (Vijayendra Suman)
- clk: qcom: gdsc: Bump parent usage count when GDSC is found enabled (Bjorn Andersson)
- nvmet-rdma: fix queue leak when connect backlog is exceeded (Xixin Liu) [Orabug: 40109663] {CVE-2026-98152}
- kselftest/arm64: mte: Use the correct naming for tag check modes in check_hugetlb_options.c (Catalin Marinas)
- kselftest/arm64: mte: Skip the hugetlb tests if MTE not supported on such mappings (Catalin Marinas)
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link (Zhang Chen)
- ALSA: control: Fix unannotated kfree() cleanup (Takashi Iwai)
- HID: fix an error code in hid_check_device_match() (Dan Carpenter)
- clk: qcom: Drop mmcx gdsc supply for dispcc and videocc (Abel Vesa)
- nvme: target: rdma: fix ndev refcount leak on queue connect (Xu Wang) [Orabug: 40109645] {CVE-2026-64321}
- net/sched: sch_htb: limit htb_classify inner-class filter hops (Jamal Hadi Salim) [Orabug: 40041294] {CVE-2026-90053}
- tcp: fix corruption of urgent data on multi-segment retransmit (Jiayuan Chen) [Orabug: 40041302] {CVE-2026-90054}
- usb: atm: usbatm: fix invalid ci_range initialization (Deepanshu Kartikey) [Orabug: 40041309] {CVE-2026-90055}
- net: fec: only stop PTP if it was initialized (Bui Duc Phuc)
- net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (Jamal Hadi Salim) [Orabug: 40041332] {CVE-2026-90058}
- net: stmmac: selftests: Account for the UC filter list for filtering tests (Maxime Chevallier)
- net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: dwmac4: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering (Maxime Chevallier)
- net: stmmac: selftests: Check multiple MMC counters (Maxime Chevallier)
- selftests/arm64: Treat KSM merge_across_nodes as optional (Usama Anjum)
- selftests/arm64: Print missing MTE TAP headers (Usama Anjum)
- selftests: arm64: add hugetlb mte tests (Yang Shi) [Orabug: 38006900,38177800]
- netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() (Pablo Neira Ayuso)
- netfilter: xt_HL: add pr_fmt and checkentry validation (Marino Dzalto)
- netfilter: xt_cgroup: Make it independent fro