Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.320.7.el7]
- selftests: fib_tests: mute cleanup error message (Po-Hsu Lin)
- KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab) [Orabug: 35449815]
- KVM: arm64: Document PMU filtering API (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Use event mask matching architecture revision (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier) [Orabug: 35449815]
- KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier) [Orabug: 35449815]
- KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline) [Orabug: 35449815]
- perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan) [Orabug: 35449815]
- Revert 'net/mlx5: Fix unpublish devlink parameters' (Si-Wei Liu) [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_eth devlink dev param' (Si-Wei Liu) [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_rdma devlink dev param' (Si-Wei Liu) [Orabug: 35431929]
- Revert 'net/mlx5: Support enable_vnet devlink dev param' (Si-Wei Liu) [Orabug: 35431929]

[5.4.17-2136.320.6.el7]
- ipmi:ssif: Add send_retries increment (Corey Minyard)
- Revert 'ubifs: dirty_cow_znode: Fix memleak in error handling path' (Zhihao Cheng)
- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian)
- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 34136927]
- scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 34136927]
- scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 34136927]
- scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 34136927]
- scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 34136927]
- scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 34136927]
- scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 34136927]
- scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 34136927]
- scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 34136927]
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257585]
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257585]
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257585]
- debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35262590]
- rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302535]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382084] {CVE-2023-32233}
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397526]
- net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416948]
- rds: Fix incorrect error pointer reference (William Kucharski) [Orabug: 35315450]

[5.4.17-2136.320.5.el7]
- vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210546]
- vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210546]
- vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez) [Orabug: 35210546]
- vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210546]
- vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210546]
- vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210546]
- vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210546]
- vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210546]
- vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210546]
- vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210546]
- vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210546]
- vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210546]
- vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210546]
- vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210546]
- vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210546]
- vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210546]
- vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210546]
- vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210546]
- vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210546]
- virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210546]
- vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210546]
- virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210546]
- vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210546]
- vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210546]
- vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210546]
- vdpasim: customize allocation size (Jason Wang) [Orabug: 35210546]
- vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210546]
- vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210546]
- vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210546]
- vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210546]
- vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 3521054