Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-106.131.4]
- jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng)
- jbd2: fix checkpoint cleanup performance regression (Zhang Yi)
- scsi: qla2xxx: Fix TMF leak through (Quinn Tran)
- scsi: qla2xxx: Fix command flush during TMF (Quinn Tran)
- scsi: qla2xxx: Limit TMF to 8 per function (Quinn Tran)
- Revert 'drm/amdgpu: install stub fence into potential unused fence pointers' (Greg Kroah-Hartman)
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)
- Revert 'scsi: qla2xxx: Fix buffer overrun' (Nilesh Javali)
- media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)
- PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address (Rick Wertenbroek)
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen)
- clk: qcom: reset: Use the correct type of sleep/delay based on length (Konrad Dybcio)
- ALSA: ac97: Fix possible error value of *rac97 (Su Hui)
- md/raid0: Fix performance regression for large sequential writes (Jan Kara)
- md/raid0: Factor out helper for mapping and submitting a bio (Jan Kara)
- md: add error_handlers for raid0 and linear (Mariusz Tkaczyk)
- md: Set MD_BROKEN for RAID1 and RAID10 (Mariusz Tkaczyk)
- LTS version: v5.15.131 (Jack Vogel)
- usb: typec: tcpci: clear the fault status bit (Marco Felsch)
- usb: typec: tcpci: move tcpci.h to include/linux/usb/ (Xin Ji)
- pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello)
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)
- tcpm: Avoid soft reset when partner does not support get_status (Badhri Jagan Sridharan)
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger)
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming)
- serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)
- serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)
- serial: qcom-geni: fix opp vote on shutdown (Johan Hovold)
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (Deren Wu)
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)
- staging: rtl8712: fix race condition (Nam Cao)
- HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (Xu Yang)
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (Luke Lu)
- ALSA: usb-audio: Fix init call orders for UAC1 (Takashi Iwai)
- USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)
- USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig)
- mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)
- ARM: pxa: remove use of symbol_get() (Arnd Bergmann)
- ksmbd: replace one-element array with flex-array member in struct smb2_ea_info (Namjae Jeon)
- ksmbd: fix wrong DataOffset validation of create context (Namjae Jeon)
- erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824286]
- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35824286]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824286]
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824286]
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824286] {CVE-2023-42753}
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35655833] {CVE-2023-22024}
- attr: use consistent sgid stripping checks (Christian Brauner) [Orabug: 35520042]
- Revert 'perf build-ids: Fall back to debuginfod query if debuginfo not found' (Samasth Norway Ananda) [Orabug: 35617848]
- KEYS: use kfree_sensitive with key (Saeed Mirzamohammadi) [Orabug: 35746757]
- kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796770]
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819592]

[5.15.0-106.130.3]
- KVM: arm64: Skip instruction after emulating write to TCR_EL1 (Oliver Upton) [Orabug: 35677037]
- uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 35761254]
- arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 35761254]
- ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 35761254]
- ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 35761254]
- ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 35761254]
- ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 35761254]
- net/rds: Avoid unpin_user_pages_dirty_lock() in tasklets (Gerd Rausch) [Orabug: 35765163]
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776935] {CVE-2023-20588}
- x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776935] {CVE-2023-20588}
- x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35778852]

[5.15.0-106.130.2]
- LTS version: v5.15.130 (Jack Vogel)
- rcu-tasks: Add trc_inspect_reader() checks for exiting critical section (Paul E. McKenney)
- rcu-tasks: Wait for trc_read_check_handler() IPIs (Paul E. McKenney)
- rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader (Neeraj Upadhyay)
- rcu: Prevent expedited GP from enabling tick on offline C