Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-205.149.5.1]
- KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384802] {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon) [Orabug: 36384802] {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon) [Orabug: 36384802] {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson) [Orabug: 36384802] {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson) [Orabug: 36384802] {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson) [Orabug: 36384802] {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov) [Orabug: 36384802] {CVE-2024-2201}
- x86/cpu: Support AMD Automatic IBRS (Kim Phillips) [Orabug: 36384802] {CVE-2024-2201}
- Documentation/hw-vuln: Update spectre doc (Lin Yujun) [Orabug: 36384802] {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre) [Orabug: 36384802] {CVE-2024-2201}

[5.15.0-205.149.5]
- uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp) [Orabug: 36318788]
- Documentation/x86: Update split lock documentation (Tony Luck) [Orabug: 36298291]
- x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli) [Orabug: 36298291]
- x86/split-lock: Remove unused TIF_SLD bit (Tony Luck) [Orabug: 36298291]
- x86/split_lock: Make life miserable for split lockers (Tony Luck) [Orabug: 36298291]

[5.15.0-205.149.4]
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)
- ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)
- afs: Fix endless loop in directory parsing (David Howells)
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)
- Revert 'drm/bridge: lt8912b: Register and attach our DSI device at probe' (Max Krummenacher)
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)
- usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)
- platform/x86: intel-vbtn: Stop calling 'VBDL' from notify_handler (Hans de Goede)
- Fix null ptr in rds_tcp_recv_path (Allison Henderson) [Orabug: 35587408]
- cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N) [Orabug: 36123597]
- vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas) [Orabug: 36298327]
- vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas) [Orabug: 36298327]
- net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas) [Orabug: 36298327]
- af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima) [Orabug: 36375407]
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) [Orabug: 36379479]

[5.15.0-205.149.3]
- net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia) [Orabug: 36248460]
- platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Shravan Kumar Ramani) [Orabug: 36299543]
- platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Liming Sun) [Orabug: 36299543]
- platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Jules Irenge) [Orabug: 36299543]
- power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Asmaa Mnebhi) [Orabug: 36299543]
- platform/mellanox: tmfifo: fix kernel-doc warnings (Randy Dunlap) [Orabug: 36299543]
- platform/mellanox: mlxbf-tmfifo: Convert to platform remove callback returning void (Uwe Kleine-Konig) [Orabug: 36299543]
- platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Shravan Kumar Ramani) [Orabug: 36299543]
- pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency (David Thompson) [Orabug: 36299543]
- pinctrl: mlxbf3: Remove gpio_disable_free() (Asmaa Mnebhi) [Orabug: 36299543]
- gpio: mlxbf3: use capital 'OR' for multiple licenses in SPDX (Krzysztof Kozlowski) [Orabug: 36299543]
- pinctrl: use capital 'OR' for multiple licenses in SPDX (Krzysztof Kozlowski) [Orabug: 36299543]
- gpio: mlxbf3: Support add_pin_ranges() (Asmaa Mnebhi) [Orabug: 36299543]
- uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi) [Orabug: 36303821]
- uek-rpm: Update the aarch64 kABI files for new symbol (Yifei Liu) [Orabug: 36323808]
- arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni) [Orabug: 36349790]

[5.15.0-205.149.2]
- LTS version: v5.15.149 (Vijayendra Suman)
- usb: dwc3: gadget: Ignore End Transfer delay on teardown (Thinh Nguyen)
- media: Revert 'media: rkisp1: Drop IRQF_SHARED' (Tomi Valkeinen)
- usb: dwc3: gadget: Execute gadget stop after halting the controller (Wesley Cheng)
- usb: dwc3: gadget: Don't delay End Transfer on delayed_status (Thinh Nguyen)
- staging: fbtft: core: set smem_len before fb_deferred_io_init call (Peter Suti)
- smb3: Replace smb2pdu 1-element arrays with fle