Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-301.163.5.2]
- mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37174198] {CVE-2024-47674}
- Revert 'Documentation/admin-guide/acpi: Move information out of shell script comments' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic-v3: Move partition_create_desc() work to a helper' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / PPTT: Provide a helper to walk processor containers' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / PPTT: Add a helper to build a cpumask from a cpu_node' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic-v3: Print DT partitions in the same way as APCI' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic-v3: Build PPI partitions on ACPI systems' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'irqchip/gic-v3: select and translate the partition domain' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / irq: Add acpi_register_partitioned_percpu_gsi()' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / PPTT: Find PPTT cache level by ID' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / PPTT: Add a helper to fill a cpumask from a processor container' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'ACPI / PPTT: Add a helper to fill a cpumask from a cache_id' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'drivers: base: cacheinfo: Add helper to find the cache size from cpu+level' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'cacheinfo: Allow for >32-bit cache 'id'' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'cacheinfo: Set cache 'id' based on DT data' (Dave Kleikamp) [Orabug: 37144820]
- Revert 'cacheinfo: Expose the code to generate a cache-id from a device_node' (Dave Kleikamp) [Orabug: 37144820]

[5.15.0-301.163.5.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37142443]

[5.15.0-301.163.5]
- netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Kuniyuki Iwashima) [Orabug: 36964003] {CVE-2024-42270}
- netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Kuniyuki Iwashima) [Orabug: 36964001] {CVE-2024-42269}
- Revert 'arm64: Allow 512K irqs' (Harshit Mogalapalli) [Orabug: 37117987]

[5.15.0-301.163.4]
- pds_core: Prevent race issues involving the adminq (Brett Creeley) [Orabug: 36529980] {CVE-2024-26623}
- netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 36530387] {CVE-2024-26681}
- devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev) [Orabug: 36530666] {CVE-2024-26734}
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Adamos Ttofari) [Orabug: 36642225] {CVE-2024-35801}
- net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Carolina Jubran) [Orabug: 36643379] {CVE-2024-35959}
- uek-rpm: correctly set DEFAULTKERNEL after removal of uek kernels (Rhythm Mahajan) [Orabug: 36709294]
- RDMA: Flip the meaning of '-1' and '0' in ibv_create_cq / ib_create_cq (Gerd Rausch) [Orabug: 36822216]
- Revert 'rds: ib: fix non-determinism when comp_vector is zero' (Gerd Rausch) [Orabug: 36822216]
- net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Aleksandr Mishin) [Orabug: 36835804] {CVE-2024-40940}
- xfrm: Remove documentation WARN_ON to limit return values for offloaded SA (Patrisious Haddad) [Orabug: 37080855]
- perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (Ravi Bangoria) [Orabug: 37088496]

[5.15.0-301.163.3]
- uek-rpm: T93: enable xxhash crypto module for fips (Dave Kleikamp) [Orabug: 37075386]
- mm: ioremap: Add ioremap/iounmap_allowed() (Kefeng Wang) [Orabug: 37061929]
- netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso) [Orabug: 36630431] {CVE-2024-27397}
- uek-rpm: Enable CONFIG_DEVICE_PRIVATE for the 64K page kernel (Dave Kleikamp) [Orabug: 36670372]
- uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp) [Orabug: 36670372]
- arm64: Allow 512K irqs (Dave Kleikamp) [Orabug: 36670372]
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Matthew R. Ochs) [Orabug: 36670372]
- firmware: smccc: Fix use of uninitialised results structure (Punit Agrawal) [Orabug: 36670372]
- i2c: smbus: Check for parent device before dereference (Andy Shevchenko) [Orabug: 36670372]
- gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (Tom Rix) [Orabug: 36670372]
- dt-bindings: gpio: Remove FSI domain ports on Tegra234 (Prathamesh Shete) [Orabug: 36670372]
- i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao) [Orabug: 36670372]
- tpm_tis_spi: Add hardware wait polling (Krishna Yarlagadda) [Orabug: 36670372]
- spi: tegra210-quad: Enable TPM wait polling (Krishna Yarlagadda) [Orabug: 36670372]
- spi: Add TPM HW flow flag (Krishna Yarlagadda) [Orabug: 36670372]
- spi: tegra210-quad: set half duplex flag (Krishna Yarlagadda) [Orabug: 36670372]
- spi: tegra210-quad: Fix iterator outside loop (Krishna Yarlagadda) [Orabug: 36670372]
- spi: tegra210-quad: Fix validate combined sequence (Krishna Yarlagadda) [Orabug: 36670372]
- ACPI/IORT: Update SMMUv3 DeviceID support (Robin Murphy) [Orabug: 36670372]
- spi: tegra210-quad: Fix duplicate resource error (Krishna Yarlagadda) [Orabug: 36670372]
- spi: tegra210-quad: Don't initialise DMA if not supported (Jon Hunter) [Orabug: 36670372]
- spi: tegra210-quad: Fix combined sequence (Krishna Yarlagadda) [Orabug: 36670372]
- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Shanke