Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.304.4.1]
- Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33832625]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492}

[5.4.17-2136.304.4]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie) [Orabug: 33794250]
- scsi: libiscsi: Drop taskqueuelock (Mike Christie) [Orabug: 33794250]
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang) [Orabug: 33495339]
- KVM: SVM: Dont intercept #GP for SEV guests (Sean Christopherson) [Orabug: 33446920]
- Revert KVM: SVM: avoid infinite loop on NPF from bad address (Sean Christopherson) [Orabug: 33446920]
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson) [Orabug: 33446920]
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33660929]
- tee: handle lookup of shm with reference count 0 (Jens Wiklander) [Orabug: 33739582] {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan) [Orabug: 33802464]

[5.4.17-2136.304.3]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33766454] {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang)
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle)
- fortify: Explicitly disable Clang support (Kees Cook)
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)
- LTS tag: v5.4.160 (Sherry Yang) [Orabug: 33536399]
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohar)
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic)
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)
- mm, oom: pagefault_out_of_memory: dont force global OOM for dying tasks (Vasily Averin)
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)
- powerpc/bpf: Validate branch ranges (Naveen N. Rao)
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)
- ovl: fix deadlock in splice write (Miklos Szeredi)
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)
- parisc: Fix backtrace to always include init funtion names (Helge Deller)
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)
- ARM: 9155/1: fix early early_iounmap() (Michal Miroslaw)
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)
- zram: off by one in read_block_state() (Dan Carpenter)
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)
- i2c: xlr: Fix a resource leak in the error handling path of xlr_i2c_probe() (Christophe JAILLET)
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)
- ar7: fix kernel builds for compiler test (Jackie Liu)
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)
- signal/sh: Use f