Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2102.204.4.2]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150427]
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard) [Orabug: 32570847]

[5.4.17-2102.204.4]
- Revert x86/reboot: Force all cpus to exit VMX root if VMX is supported (Somasundaram Krishnasamy) [Orabug: 33167303]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33165876]
- A/A Bonding: dev_hold/put() the delayed GARP work handlers netdev in rdmaip (Sharath Srinivasan) [Orabug: 33161268]
- rds: ib: Increase entropy of RDMA IOVAs (Hakon Bugge) [Orabug: 33104687]

[5.4.17-2102.204.3]
- rds: Check for illegal flags when creating an MR (Hakon Bugge) [Orabug: 33144338]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33135632] {CVE-2021-33909}

[5.4.17-2102.204.2]
- RDMA/core/sa_query: Remove unused argument (Hakon Bugge) [Orabug: 33113136]
- RDMA/cma: Fix incorrect Packet Lifetime calculation (Hakon Bugge) [Orabug: 33113136]
- RDMA: Remove a few extra calls to ib_get_client_data() (Jason Gunthorpe) [Orabug: 33113136]
- RDMA/cma: Protect RMW with qp_mutex (Hakon Bugge) [Orabug: 33113136]
- IB/cma: Introduce rdma_set_min_rnr_timer() (Hakon Bugge) [Orabug: 33113136]
- RDMA/iwcm: Allow AFONLY binding for IPv6 addresses (Bernard Metzler) [Orabug: 33113136]
- RDMA/cma: Remove unnecessary INIT->INIT transition (Hakon Bugge) [Orabug: 33113136]
- RDMA/cma: Use ACK timeout for RoCE packetLifeTime (Dag Moxnes) [Orabug: 33113136]
- crypto: ccp - Dont initialize SEV support without the SEV feature (Venu Busireddy) [Orabug: 33110762]
- xfs: fix out of bound access (Junxiao Bi) [Orabug: 33089469]
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan) [Orabug: 33042746]
- PCI/ERR: Retain status from error notification (Keith Busch) [Orabug: 32995246]
- perf maps: Do not use an rbtree to sort by map name (Arnaldo Carvalho de Melo) [Orabug: 32726674]
- block: return the correct bvec when checking for gaps (Long Li) [Orabug: 33000789]

[5.4.17-2102.204.1]
- LTS tag: v5.4.128 (Jack Vogel)
- ARM: OMAP: replace setup_irq() by request_irq() (afzal mohammed)
- KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (Eric Auger)
- tools headers UAPI: Sync linux/in.h copy with the kernel sources (Arnaldo Carvalho de Melo)
- net: fec_ptp: add clock rate zero check (Fugang Duan)
- net: stmmac: disable clocks in stmmac_remove_config_dt() (Joakim Zhang)
- mm/slub.c: include swab.h (Andrew Morton)
- mm/slub: fix redzoning for small allocations (Kees Cook)
- mm/slub: clarify verification reporting (Kees Cook)
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)
- net: ll_temac: Fix TX BD buffer overwrite (Esben Haabendal)
- net: ll_temac: Make sure to free skb when it is completely used (Esben Haabendal)
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang)
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang)
- cfg80211: avoid double free of PMSR request (Avraham Stern)
- cfg80211: make certificate generation more robust (Johannes Berg)
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)
- x86/pkru: Write hardware init value to PKRU when xstate is init (Thomas Gleixner)
- x86/process: Check PF_KTHREAD and not current->mm for kernel threads (Thomas Gleixner)
- ARCv2: save ABI registers across signal handling (Vineet Gupta)
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (Sean Christopherson)
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohar)
- PCI: aardvark: Dont rely on jiffies while holding spinlock (Remi Pommarel)
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)
- PCI: Mark TI C667X to avoid bus reset (Antti Jarvinen)
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)
- can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel)
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)
- pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled (Sergio Paracuellos)
- spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() (Patrice Chotard)
- ASoC: rt5659: Fix the lost powers for the HDA header (Jack Yu)
- regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting (Axel Lin)
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)
- icmp: dont send out ICMP messages with a source address of 0.0.0.0 (Toke Hoiland-Jorgensen)
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path (Somnath Kotur)
- bnxt_en: Rediscover PHY capabilities after firmware reset (Michael Chan)
- cxgb4: fix wrong shift. (Pavel Machek)
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)
- be2net: Fix an error handling path in be_probe() (Christophe JAILLET)
- ne