Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.330.7.1]
- KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson) [Orabug: 36384803] {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov) [Orabug: 36384803] {CVE-2024-2201}
- Documentation/hw-vuln: Update spectre doc (Lin Yujun) [Orabug: 36384803] {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson) [Orabug: 36384803] {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson) [Orabug: 36384803] {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf) [Orabug: 36384803] {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry) [Orabug: 36384803] {CVE-2024-2201}

[5.4.17-2136.330.7]
- Revert 'x86/mm/ident_map: Use gbpages only where full GB page should be mapped.' (Sherry Yang) [Orabug: 36409910]
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)
- arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer)
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)
- hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)

[5.4.17-2136.330.6]
- eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez) [Orabug: 36329600]
- KVM: x86: Handle APICv updates for APIC 'mode' changes via request (Sean Christopherson) [Orabug: 36329600]
- blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh) [Orabug: 36366420]

[5.4.17-2136.330.5]
- afs: Fix endless loop in directory parsing (David Howells)
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)
- netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)
- scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu) [Orabug: 36345168]

[5.4.17-2136.330.4]
- Revert 'crypto: api - Disallow identical driver names' (Saeed Mirzamohammadi) [Orabug: 36361379]
- Fix null ptr in rds_tcp_recv_path (Allison Henderson) [Orabug: 35587415]
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia) [Orabug: 36248461]

[5.4.17-2136.330.3]
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi) [Orabug: 36251861]
- mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga) [Orabug: 36334309]

[5.4.17-2136.330.2]
- LTS tag: v5.4.269 (Alok Tiwari)
- bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)
- of: gpio unittest kfree() wrong object (Frank Rowand)
- of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand)
- net: bcmgenet: Fix EEE implementation (Florian Fainelli)
- Revert 'Revert 'mtd: rawnand: gpmi: Fix setting busy timeout setting'' (Max Krummenacher)
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [Orabug: 36229438] {CVE-2024-0607}
- lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)
- drm/msm/dsi: Enable runtime PM (Konrad Dybcio)
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)
- PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov)
- nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)
- net: prevent mss overflow in skb_segment() (Eric Dumazet)
- netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)
- netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)
- mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)
- arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport)
- bus: moxtet: Add spi device table (Sjoerd Simons)
- tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))
- pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)
- can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)
- nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)
- nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)
- nilfs2: fix data corruption in dsync block rec