Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-101.103.2.1]
- Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35346968]
- Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35346963]

[5.15.0-101.103.2]
- uek-rpm: mod-extra: Remove mt7921e.ko from extras list (Harshit Mogalapalli) [Orabug: 34999685]
- crypto: allow ECDH and ECDSA algorithms in FIPS (Saeed Mirzamohammadi) [Orabug: 35230211]
- uek-rpm: make CRYPTO_ECDSA builtin (Saeed Mirzamohammadi) [Orabug: 35230211]
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35243389]
- net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla) [Orabug: 35246355]
- net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla) [Orabug: 35246355]
- net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla) [Orabug: 35246355]
- net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla) [Orabug: 35246355]
- PCI: Work around Intel I210 ROM BAR overlap defect (Bjorn Helgaas) [Orabug: 35250975]
- net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan) [Orabug: 35254377]
- rds: slight code cleanup of RDS checksum code (William Kucharski) [Orabug: 35262486]
- x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder) [Orabug: 35274587]
- x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello) [Orabug: 35274587]
- x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I) [Orabug: 35274587]
- x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello) [Orabug: 35274587]
- ACPICA: Add support for MADT online enabled bit (Mario Limonciello) [Orabug: 35274587]
- net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35278121]
- KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [Orabug: 35278210] {CVE-2023-30456}
- Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang) [Orabug: 35285941]

[5.15.0-101.103.1]
- Revert 'Revert 'x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments'' (Tom Saeger)
- Revert 'Revert 'Makefile: link with -z noexecstack --no-warn-rwx-segments'' (Tom Saeger)
- LTS version: v5.15.103 (Jack Vogel)
- Makefile: use -gdwarf-{4|5} for assembler for DEBUG_INFO_DWARF{4|5} (Nick Desaulniers)
- KVM: VMX: Fix crash due to uninitialized current_vmcs (Alexandru Matei)
- KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (Vitaly Kuznetsov)
- KVM: nVMX: Don't use Enlightened MSR Bitmap for L3 (Vitaly Kuznetsov)
- fs: hold writers when changing mount's idmapping (Christian Brauner)
- UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada)
- xfs: remove xfs_setattr_time() declaration (Gaosheng Cui)
- KVM: fix memoryleak in kvm_init() (Miaohe Lin)
- tools bpftool: Fix compilation error with new binutils (Andres Freund)
- tools bpf_jit_disasm: Fix compilation error with new binutils (Andres Freund)
- tools perf: Fix compilation error with new binutils (Andres Freund)
- tools include: add dis-asm-compat.h to handle version differences (Andres Freund)
- tools build: Add feature test for init_disassemble_info API changes (Andres Freund)
- sh: define RUNTIME_DISCARD_EXIT (Tom Saeger)
- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 (Masahiro Yamada)
- powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman)
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman)
- arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada)
- ext4: block range must be validated before use in ext4_mb_clear_bb() (Lukas Czerner)
- ext4: add strict range checks while freeing blocks (Ritesh Harjani)
- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (Ritesh Harjani)
- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (Ritesh Harjani)
- filelocks: use mount idmapping for setlease permission check (Seth Forshee)
- media: rc: gpio-ir-recv: add remove function (Li Jun)
- media: ov5640: Fix analogue gain control (Paul Elder)
- scripts: handle BrokenPipeError for python scripts (Masahiro Yamada)
- PCI: Add SolidRun vendor ID (Alvaro Karsz)
- macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)
- alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)
- powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (Rohan McLure)
- powerpc/iommu: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman)
- MIPS: Fix a compilation issue (xurui)
- fs: use consistent setgid checks in is_sxid() (Christian Brauner)
- attr: use consistent sgid stripping checks (Christian Brauner)
- attr: add setattr_should_drop_sgid() (Christian Brauner)
- fs: move should_remove_suid() (Christian Brauner)
- attr: add in_group_or_capable() (Christian Brauner)
- fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu)
- fs: add mode_strip_sgid() helper (Yang Xu)
- xfs: set prealloc flag in xfs_alloc_file_space() (Dave Chinner)
- xfs: fallocate() should call file_modified() (Dave Chinner)
- xfs: remove XFS_PREALLOC_SYNC (Dave Chinner)
- xfs: use setattr_copy to set vfs inode attributes (Darrick J. Wong)
- tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address (Morten Linderud)
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (David Disseldorp)
- staging: rtl8723bs: Fix key-store index handling (Hans de Goede)
- staging: rtl8723bs: fix placement of braces (Hannes Braun)
- Staging: rtl8723bs: Placing opening { braces in previous line (Jagath Jog J)
- staging: rtl8723bs: clean up comparsions to NULL (Michael Straube)
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia)
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips)
-