Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.323.8.el8]
- vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318]
- Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318]

[5.4.17-2136.323.7.el8]
- x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160]
- KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160]
- x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160]
- x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495]
- mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495]
- x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495]
- mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111]

[5.4.17-2136.323.6.el8]
- ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717]
- nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589]
- nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589]
- nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534]
- x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982}
- x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982}
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982}
- scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915]

[5.4.17-2136.323.5.el8]
- io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339]
- io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339]
- io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339]
- io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339]
- io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339]
- io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339]
- io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339]
- io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339]
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339]
- io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339]
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339]
- io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339]
- io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339]
- io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339]
- io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339]
- io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339]
- io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339]
- io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339]
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339]
- io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339]
- io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339]
- io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339]
- io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339]
- io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339]
- io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339]
- io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339]
- i