Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-1.43.4.1]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588}

[5.15.0-1.43.4]
- Revert selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34399286]
- Revert selftests/bpf: Add test for reg2btf_ids out of bounds access (Alan Maguire) [Orabug: 34399286]

[5.15.0-1.43.3]
- x86/alternative: The retpoline alternative is not applied (Alexandre Chartre) [Orabug: 34395937]
- x86/ftrace: Do not copy ftrace_stub() in ftrace trampoline (Alexandre Chartre) [Orabug: 34395937]

[5.15.0-100.43.0]
- ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi) [Orabug: 34364336]
- ocfs2: dlmfs: dont clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi) [Orabug: 34364336]
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel) [Orabug: 34364336]
- net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli) [Orabug: 34366723]
- lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34393053] {CVE-2022-21505}

[5.15.0-1.43.1]
- LTS version: v5.15.43 (Jack Vogel)
- mptcp: Do TCP fallback on early DSS checksum failure (Mat Martineau)
- LTS version: v5.15.42 (Jack Vogel)
- afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells)
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang)
- mt76: mt7921e: fix possible probe failure after reboot (Sean Wang)
- dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group (Jae Hyun Yoo)
- Input: ili210x - fix reset timing (Marek Vasut)
- arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Shreyas K K)
- net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler)
- net: atlantic: add check for MAX_SKB_FRAGS (Grant Grundler)
- net: atlantic: reduce scope of is_rsc_complete (Grant Grundler)
- net: atlantic: fix frag[0] not initialized (Grant Grundler)
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang)
- ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang)
- nl80211: fix locking in nl80211_set_tx_bitrate_mask() (Johannes Berg)
- net: fix wrong network header length (Lina Wang)
- fbdev: Prevent possible use-after-free in fb_release() (Daniel Vetter)
- Revert fbdev: Make fb_release() return -ENODEV if fbdev was unregistered (Javier Martinez Canillas)
- selftests: add ping test with ping_group_range tuned (Nicolas Dichtel)
- nl80211: validate S1G channel width (Kieran Frewen)
- mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau)
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov)
- scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (Brian Bunker)
- perf bench numa: Address compiler error on s390 (Thomas Richter)
- perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform (Kan Liang)
- gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-Konig)
- gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen)
- perf build: Fix check for btf__load_from_kernel_by_id() in libbpf (Arnaldo Carvalho de Melo)
- scsi: ufs: core: Fix referencing invalid rsp field (Daejun Park)
- riscv: dts: sifive: fu540-c000: align dma node name with dtschema (Krzysztof Kozlowski)
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn)
- netfilter: flowtable: move dst_check to packet path (Ritaro Takenaka)
- netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Pablo Neira Ayuso)
- netfilter: flowtable: fix TCP flow teardown (Pablo Neira Ayuso)
- igb: skip phy status check where unavailable (Kevin Mitchell)
- mptcp: fix checksum byte order (Paolo Abeni)
- mptcp: reuse __mptcp_make_csum in validate_data_csum (Geliang Tang)
- mptcp: change the parameter of __mptcp_make_csum (Geliang Tang)
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel)
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel)
- net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang)
- net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Maor Dickman)
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou)
- net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET)
- clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu)
- ice: Fix interrupt moderation settings getting cleared (Michal Wilczynski)
- ice: move ice_container_type onto ice_ring_container (Maciej Fijalkowski)
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt)
- ice: fix crash when writing timestamp on RX rings (Arkadiusz Kubalewski)
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)
- net: systemport: Fix an error handling path in bcm_sysport_probe() (Christophe JAILLET)
- Revert PCI: aardvark: Rewrite IRQ code to chained IRQ handler (Pali Rohar)
- netfilter: nft_flow_offload: fix offload with pppoe + vlan (Felix Fietkau)
- net: fix dev_fill_forward_path with pppoe + bridge (Felix Fietkau)
- netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices (Felix Fietkau)
- netfilter: flowtable: fix excessive hw offload attempts after failure (Felix Fietkau)
- net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni)
- xfrm: fix disable_policy flag use when arriving from different devices (Eyal Birger)
- xfrm: rework default policy structure (Nicolas Dichtel)
- net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam)
- net: ipa: record proper RX transaction count (Alex Elder)
- AL