Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.324.5.3.el8]
- Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing
checkpoint' (Sherry Yang) [Orabug: 35896102]

[5.4.17-2136.324.5.2.el8]
- fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837]

[5.4.17-2136.324.5.1.el8]
- x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky)
[Orabug: 35857366] {CVE-2023-5090}

[5.4.17-2136.324.5.el8]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen)
- Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky)
- ALSA: ac97: Fix possible error value of *rac97 (Su Hui)
- pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello)
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)
- netfilter: xt_u32: validate user space input (Wander Lairson Costa)
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824287] {CVE-2023-42753}

[5.4.17-2136.324.4.el8]
- kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796771]
- x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky) [Orabug: 35818857] {CVE-2023-20569}
- objtool/x86: Fix SRSO mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Cleanup the untrain mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Rename original retbleed methods (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Fix return thunks in generated code (Josh Poimboeuf) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569}
- scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819593]
- rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819522] {CVE-2023-22024}

[5.4.17-2136.324.3.el8]
- uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 34833165]
- arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 34833165]
- ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 34833165]
- ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 34833165]
- ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 34833165]
- ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 34833165]
- ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue) [Orabug: 34833165]
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588}
- x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588}
- uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp) [Orabug: 35787554]

[5.4.17-2136.324.2.el8]
- LTS tag: v5.4.256 (Sherry Yang)
- Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman)
- powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing)
- powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip)
- LTS tag: v5.4.255 (Sherry Yang)
- dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das)
- clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das)
- scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)
- scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang)
- Documentation/sysctl: document page_lock_unfairness (Joel Savitz)
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King)
- interconnect: Do not skip aggregation for disabled paths (Georgi Djakov)
- Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai)
- ALSA: pcm: Fix build error on m68k and others (Takashi Iwai)
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)
- drm/display/dp: Fix the