Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-326.224.5.0.1]
- Fix TSA microcode check for ZEN5 (Dave Kleikamp) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004}
- Fix Zen5 TSA (Borislav Petkov (AMD)) [Orabug: 40172717] {CVE-2024-36350} {CVE-2024-36357} {CVE-2026-0004}
- iommu/amd: Force device table to maximum size (Suravee Suthikulpanit) [Orabug: 40172717] {CVE-2024-21963}

[5.15.0-326.224.5]
- LTS version: v5.15.224 (Samasth Norway Ananda)
- signal: don't retarget shared signals in a dying thread group (Christian Brauner)
- io-wq: order the exit bit against worker creation task work (Christian Brauner)
- keys/trusted_keys: return immediately after TPM unseal failure (Srish Srinivasan)
- KEYS: trusted: Fix blob allocation size in tpm2_key_decode() (Stefano Garzarella)
- KEYS: Fix key_reject_and_link() race with keyring restriction (Adrian Martinez)
- keys: Protect the read method check against type removal (Cen Zhang)
- keys: Protect the type name while describing a key (Cen Zhang)
- keys: Check the authorization payload in process keyring searches (Cen Zhang)
- keys: Avoid the owner account dereference in named keyring lookup (Cen Zhang)
- tracing: Fix 64-bit and signed histogram fields on 32-bit kernels (Donggeun Yoo)
- tracing: Unregister field variable histograms when the command fails (Donggeun Yoo)
- tracing: Save the event file instead of the compatible histogram (Donggeun Yoo)
- tracing: Reject incomplete event filter expressions (Kyle Zeng)
- Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (Pauli Virtanen)
- Bluetooth: L2CAP: access chan->conn safely in get/setsockopt (Pauli Virtanen)
- net_sched: codel: fix stale state for empty flows in fq_codel (Jonas Koppeler)
- md: move initialization and destruction of 'io_acct_set' to md.c (Yu Kuai)
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Pablo Neira Ayuso)
- netfilter: nf_tables: always increment set element count (Florian Westphal)
- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xiang Mei)
- ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION (Aleksandr Khromov)
- ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in (Aleksandr Khromov)
- ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION (Aleksandr Khromov)
- xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf (Yun Zhou)
- cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Frank Sorenson)
- dm-integrity: fix infinite loop on discard with large tag size (Ben Cressey)
- drm/i915/dmc: Harden DMC firmware payload parsing (Dibin Moolakadan Subrahmanian)
- i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (Wentao Liang)
- ipv4: udp: Create exceptions before socket matching (Ido Schimmel)
- vsock/virtio: validate packet source for connected sockets (Daehyeon Ko)
- dm-integrity: require stable writes for internal hash modes (Chen Cheng)
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal)
- bridge: mcast: Fix use-after-free during router port configuration (Ido Schimmel)
- mm/huge_memory: transfer the pmd dirty bit to the folio on zap (Usama Arif)
- unicode: free the map after a grace period (Christian Brauner)
- watch_queue: Fix note pool publication race in watch_queue_set_size() (Cen Zhang (Microsoft))
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (Daniil Stas)
- KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (Fuad Tabba)
- scsi: st: Fix use-after-free race between st_remove() and st_open() (Laurence Oberman)
- tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields (Lee Jones)
- net/sched: cls_flower: validate mask pointer after nla_next() (Aohan Mei)
- net: bridge: mcast: don't truncate the port group walk on teardown (Jun Yang)
- KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots (Hyunwoo Kim)
- OPP: Fix race between OPP addition and lookup (Di Shen)
- net/sched: cls_u32: skip hash tables in u32_bind_class() (Zhang Changzhong)
- security/keys: fix missed RCU read section on lookup (Linus Torvalds)
- drm/amdgpu: Fix VCE 3 ring align_mask (David Rosca)
- mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF (Lorenzo Stoakes (ARM))
- ipv4: avoid divide by zero in fib_rebalance (Zihan Xi)
- s390/pci: Fix leak of uninitialized kernel data in SCLP report (Niklas Schnelle)
- s390/ctcm: Prevent XID null dereference (Aswin Karuvally)
- page_pool: keep frag_offset aligned for odd-sized requests (Florian Schauer)
- sctp: validate chunk length in the inqueue parser (Charles Vosburgh)
- tipc: protect node reset trace dump with node lock (Chengfeng Ye)
- net/iucv: fix the recvmsg window update (Bryam Vargas)
- dm-ebs: fix incorrect device offset check in ebs_ctr() (Genjian Zhang)
- dm-crypt: fix a tiny race condition in crypt_dec_pending (Ben Cressey)
- dm cache: fix issue with background work locking (Benjamin Marzinski)
- dm cache: fix demotion stats in passthrough mode (Ming-Hung Tsai)
- cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children (Etienne Perot)
- tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) (Cen Zhang (Microsoft Security FORGE Labs))
- wifi: p54: validate firmware record lengths (Heyang Tan)
- tracing: Fix hist trigger timestamps for buffered events (Tengda Wu)
- tracing: Fix the shift out of bounds in the log2 histogram modifier (Donggeun Yoo)
- drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (Jesse Zhang)
- drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (Timur Kristof)
- scsi: libiscsi: Validate the task named by a management response (Yehyeong Lee)
- scsi: libiscsi: Validate the ITT reflected in a Reject PDU (Yehyeong Lee)
- scsi: libiscsi: Reject a negative task index from parse_pdu_itt (Yehyeong Lee)
- i2c: qcom-cci: Fix HALT_ACK reset request being dropped (Loic Poulain)
- tools: gpio: fix building from the top level with O= (Sasha Levin)
- sctp: revalidate