Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.316.7]
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045]

[5.4.17-2136.316.6]
- block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807]
- powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34953089]
- block-mq: fix hung due to too much warning log (Junxiao Bi) [Orabug: 34979810]
- usb: dwc3: core: fix kernel panic when do reboot (Peter Chen) [Orabug: 34988646]
- usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (Jack Pham) [Orabug: 34988646]

[5.4.17-2136.316.5]
- net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979171]

[5.4.17-2136.316.4]
- Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700110]
- net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607845]
- net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600820]
- net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314503]
- net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556038]
- net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560701]
- IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821074]
- vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915128]
- uek-rpm: Add nft_reject* modules to nano rpm. (Somasundaram Krishnasamy) [Orabug: 34966035]
- rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34830755]
- x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34864098]
- KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961704]

[5.4.17-2136.316.3]
- LTS tag: v5.4.228 (Sherry Yang)
- ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)
- can: mcba_usb: Fix termination command argument (Yasushi SHOJI)
- can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)
- pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda)
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)
- nfp: fix use-after-free in area_cache_get() (Jialiang Wang)
- block: unhash blkdev part inode when the part is deleted (Ming Lei)
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang)
- x86/smpboot: Move rcu_cpu_starting() earlier (Paul E. McKenney)
- net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head (Lorenzo Colitti)
- LTS tag: v5.4.227 (Sherry Yang)
- can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus)
- net: mvneta: Fix an out of bounds check (Dan Carpenter)
- ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet)
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang)
- xen/netback: fix build warning (Juergen Gross)
- ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong)
- ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel)
- ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel)
- tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing)
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian)
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian)
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu)
- net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang)
- nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav)
- NFC: nci: Bounds check struct nfc_target arrays (Kees Cook)
- i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski)
- i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch)
- i40e: Fix not setting default xps_cpus after reset (Michal Jaron)
- net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter)
- xen-netfront: Fix NULL sring after live migration (Lin Liu)
- net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko)
- net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko)
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun)
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao)
- net: dsa: ksz: Check return value (Artem Chernyshev)
- Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin)
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo)
- af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima)
- igb: Allocate MSI-X vector when testing (Akihiko Odaki)
- e1000e: Fix TX dispatch condition (Akihiko Odaki)
- gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang)
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang)
- ca8210: Fix crash by zero initializing data (Hauke Mehrtens)
- ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan)
- can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp)
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng)
- HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova)
- HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel)
- drm/shmem-helper: Remove errant put in error path (Rob Clark)
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth)
- mm/gup: fix gup_pud_range() for dax (John Starks)
- memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo)
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil)
- Revert 'net: dsa: b53: Fix valid setting for MDB entries' (Rafal Milecki)
- xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross)
- xen/netback: do some code cleanup (