Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

- 5.4.17-2136.308.7.el7
- uek-rpm: Update OL7/8 Secureboot certificate and shim versions (Sherry Yang) [Orabug: 34248329]

[5.4.17-2136.308.6]
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL (Mike Rapoport)
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)
- net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)
- dmaengine: Revert 'dmaengine: shdma: Fix runtime PM imbalance on error' (Vinod Koul)
- scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)
- media: Revert 'media: em28xx: add missing em28xx_close_extension' (Pavel Skripkin)
- regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)
- Revert 'Input: clear BTN_RIGHT/MIDDLE on buttonpads' (Jose Exposito)
- f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34211086] {CVE-2022-1729}
- debug: Lock down kgdb (Stephen Brennan) [Orabug: 34211075] {CVE-2022-21499}
- io_uring: always use original task when preparing req identity (Jens Axboe) [Orabug: 34211070] {CVE-2022-1786}
- ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [Orabug: 34007905] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [Orabug: 34007905] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [Orabug: 34007905] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [Orabug: 34007905] {CVE-2022-1048}
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34205799] {CVE-2022-1852} {CVE-2022-1852}

[5.4.17-2136.308.5]
- vfio/type1: misalignment sanity check broken when mapping dma (Anthony Yznaga) [Orabug: 34124949]
- uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling) [Orabug: 34146030]

[5.4.17-2136.308.4]
- bpf: parse BTF with linkage set for functions (Alan Maguire) [Orabug: 34068157]
- selftests/bpf: remove BPF skeleton-based tests that got pulled in via backports (Alan Maguire) [Orabug: 34068157]
- uek-rpm: default for COMMON_CLK_MARVELL_OTX2 should be 'n' (Henry Willard) [Orabug: 34138118]

[5.4.17-2136.308.3]
- xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong) [Orabug: 34085023]
- vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong) [Orabug: 34085023]
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong) [Orabug: 34085023]
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong) [Orabug: 34085023]
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter) [Orabug: 34085023]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [Orabug: 34085023]
- xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong) [Orabug: 34085023]
- x86/platform/uv: Log gap hole end size (Mike Travis) [Orabug: 34100339]
- x86/platform/uv: Update TSC sync state for UV5 (Mike Travis) [Orabug: 34100339]
- x86/platform/uv: Update NMI Handler for UV5 (Mike Travis) [Orabug: 34100339]
- perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar) [Orabug: 34100339]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl) [Orabug: 34100339]
- net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch) [Orabug: 34105318]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay) [Orabug: 34111386]
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky) [Orabug: 34111386]
- staging: mmal-vchiq: Reset buffers_with_vpu on port_enable (Dave Stevenson) [Orabug: 34125311]
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang) [Orabug: 34135343] {CVE-2022-1353}
- clocksource: Avoid accidental unstable marking of clocksources (Waiman Long) [Orabug: 34145210]
- clocksource: Reduce clocksource-skew threshold (Paul E. McKenney) [Orabug: 34145210]
- Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34152863]
- Revert 'rds/ib: reap tx completions during connection shutdown' (Nagappan Ramasamy Palaniappan) [Orabug: 34152863]
- Revert 'rds/ib: handle posted ACK during connection shutdown' (Nagappan Ramasamy Palaniappan) [Orabug: 34152863]

[5.4.17-2136.308.2]
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL (James Morse)
- LTS tag: v5.4.188 (Sherry Yang)
- llc: only change llc->dev when bind() succeeds (Eric Dumazet)
- nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)
- tpm: use try_get_ops() in tpm-space.c (James Bottomley)
- mac80211: fix potential double free on mesh join (Linus Lussing)
- rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)
- crypto: qat - disable registration of algorithms (Giovanni Cabiddu)
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)
- ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)
- ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)
- drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)
- ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)
- ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)