Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.321.4.el8]
- tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079]
- net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149]

[5.4.17-2136.321.3.el8]
- selinux: don't use make's grouped targets feature yet (Paul Moore)
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings)
- Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman)
- iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061]
- iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061]
- iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061]
- iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061]
- iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061]
- iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061]
- iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061]
- KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061]
- xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734]
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen) [Orabug: 35152388]
- crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388]
- crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388]
- bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203]
- bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203]
- bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203]
- bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203]
- bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203]
- bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203]

[5.4.17-2136.321.2.el8]
- LTS tag: v5.4.245 (Sherry Yang)
- netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey)
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel)
- binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas)
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li)
- cdc_ncm: Fix the build warning (Alexander Bersenev)
- net/mlx5: Devcom, serialize devcom registration (Shay Drory)
- net/mlx5: devcom only supports 2 ports (Mark Bloch)
- fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge)
- power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede)
- power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede)
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede)
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus)
- cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev)
- LTS tag: v5.4.244 (Sherry Yang)
- 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory)
- net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan)
- forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski)
- x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)
- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)
- coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter)
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)
- power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)
- power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)
- power: supply: leds: Fix blink to LED on transition (Hans de Goede)
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon)
- net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)
- media: radio-shark: Add endpoint checks (Alan Stern)
- USB: sisusbvga: Add endpoint checks (Alan Stern)
- USB: core: Add routines for endpoint checks in old drivers (Alan Stern)
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima)
- net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo)
- fbdev: udlfb: Fix endpoint check (Alan Stern)
- debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa)
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui)
- parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller)
- selftests/memfd: Fix unknown type name build failure (Hardik Garg)
- x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen)
- btrfs: use nofs when cleaning up aborted transactions (Josef Bacik)
- gpio: mockup: Fix mode of debugfs files (Zev Weiss)
- parisc: Allow to reboot machine after system halt (Helge Deller)
- parisc: Handle kgdb breakpoints only in kernel context (Helge Deller)
- m68k: Move signal frame following exception on 68020/030 (Finn Thain)
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li)
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski)
- mt76: mt7615: Fix build with older compilers (Pablo Greco)
- spi: fsl-cpm: Use 16 bit mode for large transfers