Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.318.7.1.el7]
- KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587]
- KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587]
- KVM: arm64: pmu: Only handle supported event counters (Eric Auger

[5.4.17-2136.318.7.el8]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz) [Orabug: 35251798]
- xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35214060]
- rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35146761]
- uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy) [Orabug: 33755589]

[5.4.17-2136.318.6.el8]
- net/rds: Flip the default value of 'rds_wq_strictly_ordered' (Gerd Rausch)
[Orabug: 35197635]

[5.4.17-2136.318.5.el8]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192763]
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192763]
- arm64: kdump: Increase reserved memory for larger machines (Henry Willard) [Orabug: 35051468]
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 34729426]
- KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces (Like Xu) [Orabug: 34729426]
- Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai) [Orabug: 35053343]
- Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai) [Orabug: 35053343]
- Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai) [Orabug: 35053343]
- Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai) [Orabug: 35053343]
- Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai) [Orabug: 35053343]
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672}
- KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672}
- x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672}
- uek-rpm: aarch64: embedded: Enable CONFIG_RANDOMIZE_BASE to support ksplice for T93 (Thomas Tai) [Orabug: 35180981]
- drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) [Orabug: 34951503] {CVE-2022-3108}
- mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054622]
- mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054622]
- net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch) [Orabug: 35094723]
- rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge) [Orabug: 35155114]
- Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman) [Orabug: 35161536]

[5.4.17-2136.318.4.el8]
- ipc: update semtimedop() to use hrtimer (Prakash Sangappa) [Orabug: 35069807]
- rds: ib: Destroy fastreg resources correctly (Hakon Bugge) [Orabug: 35140658]
- rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Hakon Bugge) [Orabug: 35140648]
- mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai) [Orabug: 35159790]
- net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang) [Orabug: 35084730]
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35145857]

[5.4.17-2136.318.3.el8]
- vc_screen: don't clobber return value in vcs_read (Thomas WeiBschuh)
- LTS tag: v5.4.233 (Sherry Yang)
- bpf: add missing header file include (Linus Torvalds)
- Revert 'net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs' (Vladimir Oltean)
- ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook)
- wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)
- uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Pavel Skripkin)
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang)
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde)
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson) {CVE-2022-2196}
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson)
- random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)
- wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)
- drm/etnaviv: don't truncate physical page address (Lucas Stach)
- drm: etnaviv: fix common struct sg_table related issues (Marek Szyprowski)
- scatterlist: add generic wrappers for iterating over sgtable objects (Marek Szyprowski)
- dma-mapping: add generic helpers for mapping sgtable objects (Marek Szyprowski)
- LTS tag: v5.4.232 (Sherry Yang)
- net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter)
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart)
- nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi)
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)
- i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova)
- ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault)
- ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault)
- ixgbe: add double of VLAN header when computing the max MTU (Jason Xing)
- net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)
- net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea)
- bnxt_en: Fix m