Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.331.7]
- Revert 'tracing/trigger: Fix to return error if failed to alloc snapshot' (Siddh Raman Pant)
- Revert 'selftests: mm: fix map_hugetlb failure on 64K page size systems' (Harshit Mogalapalli) [Orabug: 36584568]
- Revert 'net/mlx5: Enable SW-defined RoCEv2 UDP source port' (Arumugam Kolappan) [Orabug: 36530159]
- PCI: boot time optimization (Harman Kalra) [Orabug: 36553666]

[5.4.17-2136.331.6]
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)
- ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)
- ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)
- mmc: core: Fix switch on gp3 partition (Dominique Martinet)
- Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu)
- serial: max310x: fix NULL pointer dereference in I2C instantiation (Hugo Villeneuve)
- bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju) [Orabug: 36250568]
- rds/rdma: Fix congestion value for userspace consumption (Juan Garcia) [Orabug: 36264652]
- rds: Include transport protocol name in rds-info -k output (Juan Garcia) [Orabug: 36264652]

[5.4.17-2136.331.5]
- hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek) [Orabug: 36485646]
- rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry) [Orabug: 36394488]
- rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia) [Orabug: 36264675]
- rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Hakon Bugge) [Orabug: 36236541]
- rds: ib: Tear down QP when FRWR WRs fails (Hakon Bugge) [Orabug: 36236541]
- rds: ib: Poll fastreg CQ before destroying (Hakon Bugge) [Orabug: 36236541]

[5.4.17-2136.331.4]
- net/mlx5: Brute force GFP_NOIO (Hakon Bugge) [Orabug: 35436312]
- RDMA/mlx5: Brute force GFP_NOIO (Hakon Bugge) [Orabug: 35436312]
- RDMA/cm: Brute force GFP_NOIO (Hakon Bugge) [Orabug: 35436312]
- RDMA/cma: Brute force GFP_NOIO (Hakon Bugge) [Orabug: 35436312]
- rds: Brute force GFP_NOIO (Hakon Bugge) [Orabug: 35436312]
- workqueue: Inherit NOIO and NOFS alloc flags (Hakon Bugge) [Orabug: 35436312]
- KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36496846] {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36496846] {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36496846] {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta) [Orabug: 36496846] {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon) [Orabug: 36496846] {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta) [Orabug: 36496846] {CVE-2024-2201}
- x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson) [Orabug: 36496846] {CVE-2024-2201}
- x86/bugs: Use sysfs_emit() (Borislav Petkov) [Orabug: 36496846] {CVE-2024-2201}
- Documentation/hw-vuln: Update spectre doc (Lin Yujun) [Orabug: 36496846] {CVE-2024-2201}
- x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson) [Orabug: 36496846] {CVE-2024-2201}
- KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson) [Orabug: 36496846] {CVE-2024-2201}
- x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta) [Orabug: 36496846] {CVE-2024-2201}
- objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf) [Orabug: 36496846] {CVE-2024-2201}
- objtool: Only include valid definitions depending on source file type (Julien Thierry) [Orabug: 36496846] {CVE-2024-2201}

[5.4.17-2136.331.3]
- LTS tag: v5.4.273 (Sherry Yang)
- regmap: Add missing map->bus check (Marek Vasut)
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)
- bpf: report RCU QS in cpumap kthread (Yan Zhai)
- rcu: add a helper to report consolidated flavor QS (Yan Zhai)
- netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso)
- ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 (Michael Klein)
- octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep)
- net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)
- hsr: Handle failures in module init (Felix Maurer)
- packet: annotate data-races around ignore_outgoing (Eric Dumazet)
- hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)
- s390/vtime: fix average steal time calculation (Mete Durlu)
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)
- staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)
- serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)
- kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada)
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)
- serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE))
- afs: Revert 'afs: Hide silly-rename files from userspace' (David Howells)
- NFS: Fix an off by one in root_nfs_cat() (Ch