Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-2.52.3.el8]
- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585}
- fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548]
- rds: ib: Add preemption control when using per-cpu variables (Hakon Bugge) [Orabug: 34505120]
- ocfs2: fix handle refcount leak in two exception handling paths (Chenyuan Mi) [Orabug: 34436530]
- netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) [Orabug: 34495566] {CVE-2022-2586}
- netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Thadeu Lima de Souza Cascardo) [Orabug: 34495566] {CVE-2022-2586}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo) [Orabug: 34495566] {CVE-2022-2586}
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 34510687] {CVE-2022-21385}
- kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan) [Orabug: 34476940]
- kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan) [Orabug: 34476940]
- kernfs: make ->attr.open RCU protected. (Imran Khan) [Orabug: 34476940]
- kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan) [Orabug: 34476940]
- kernfs: Remove reference counting for kernfs_open_node. (Imran Khan) [Orabug: 34476940]
- Revert net/rds: Connect TCP backends deterministically (Gerd Rausch) [Orabug: 34476561]
- rds/ib: handle posted ACK during connection shutdown (Rohit Nair) [Orabug: 34465808]
- rds/ib: reap tx completions during connection shutdown (Rohit Nair) [Orabug: 34465808]
- uek-rpm: Set CONFIG_VSOCKETS=m and CONFIG_VSOCKETS_DIAG=m (Victor Erminpour) [Orabug: 34461322]
- scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [Orabug: 34419970] {CVE-2022-21546}
- rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair) [Orabug: 34414238]

[5.15.0-2.52.2]
- PCI: pciehp: Add quirk to handle spurious DLLSC on a x4x4 SSD (Thomas Tai) [Orabug: 34358322]
- net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman) [Orabug: 34477072]
- xen/manage: Use orderly_reboot() to reboot (Ross Lagerwall) [Orabug: 34480751]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34484536] {CVE-2022-2588}

[5.15.0-2.52.1]
- LTS version: v5.15.52 (Jack Vogel)
- io_uring: fix not locked access to fixed buf table (Pavel Begunkov)
- net: mscc: ocelot: allow unregistered IP multicast flooding to CPU (Vladimir Oltean)
- rtw88: rtw8821c: enable rfe 6 devices (Ping-Ke Shih)
- rtw88: 8821c: support RFE type4 wifi NIC (Guo-Feng Fan)
- fs: account for group membership (Christian Brauner)
- fs: fix acl translation (Christian Brauner)
- fs: support mapped mounts of mapped filesystems (Christian Brauner)
- fs: add i_user_ns() helper (Christian Brauner)
- fs: port higher-level mapping helpers (Christian Brauner)
- fs: remove unused low-level mapping helpers (Christian Brauner)
- fs: use low-level mapping helpers (Christian Brauner)
- docs: update mapping documentation (Christian Brauner)
- fs: account for filesystem mappings (Christian Brauner)
- fs: tweak fsuidgid_has_mapping() (Christian Brauner)
- fs: move mapping helpers (Christian Brauner)
- fs: add is_idmapped_mnt() helper (Christian Brauner)
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (Naveen N. Rao)
- xfs: Fix the free logic of state in xfs_attr_node_hasname (Yang Xu)
- xfs: use kmem_cache_free() for kmem_cache objects (Rustam Kovhaev)
- bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() (Coly Li)
- tick/nohz: unexport __init-annotated tick_nohz_full_setup() (Masahiro Yamada)
- LTS version: v5.15.51 (Jack Vogel)
- powerpc/pseries: wire up rng during setup_arch() (Jason A. Donenfeld)
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) (Masahiro Yamada)
- dma-direct: use the correct size for dma_set_encrypted() (Dexuan Cui)
- perf build-id: Fix caching files with a wrong build ID (Adrian Hunter)
- random: update comment from copy_to_user() -> copy_to_iter() (Jason A. Donenfeld)
- ARM: dts: bcm2711-rpi-400: Fix GPIO line names (Stefan Wahren)
- modpost: fix section mismatch check for exported init/exit sections (Masahiro Yamada)
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init (Miaoqian Lin)
- memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings (Miaoqian Lin)
- ARM: Fix refcount leak in axxia_boot_secondary (Miaoqian Lin)
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe (Miaoqian Lin)
- ARM: exynos: Fix refcount leak in exynos_map_pmu (Miaoqian Lin)
- arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode (Aswath Govindraju)
- ARM: dts: imx6qdl: correct PU regulator ramp delay (Lucas Stach)
- ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node (Alexander Stein)
- drm/msm/dp: Always clear mask bits to disable interrupts at dp_ctrl_reset_irq_ctrl() (Kuogee Hsieh)
- powerpc/powernv: wire up rng during setup_arch (Jason A. Donenfeld)
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Andrew Donnellan)
- powerpc: Enable execve syscall exit tracepoint (Naveen N. Rao)
- powerpc/microwatt: wire up rng during setup_arch() (Jason A. Donenfeld)
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX (Helge Deller)
- parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI (Helge Deller)
- xtensa: Fix refcount leak bug in time.c (Liang He)
- xtensa: xtfpga: Fix refcount leak bug in setup (Liang He)
- iio: adc: ti-ads131e08: add missing fwnode_handle_put() in ads131e08_alloc_channels() (Jialin Zhang)
- iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client (Miaoqian Lin)
- iio: adc: rzg2l_adc: add missing fwnode_handle_p