Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.2.0]
- mm: account managed pages to correct zone during deferred page init (Daniel Jordan) [Orabug: 29914836]

[4.14.35-1902.1.5]
- CVE numbers for build v4.14.35-1902.1.3 and fixup (Jack Vogel) [Orabug: 29890784] [Orabug: 29884301] [Orabug: 29884301] {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479}

[4.14.35-1902.1.4]
- tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins) [Orabug: 29890784]
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet) [Orabug: 29886594]

[4.14.35-1902.1.3]
- tcp: add tcp_min_snd_mss sysctl (Eric Dumazet) [Orabug: 29884301]
- tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet) [Orabug: 29884301]
- tcp: limit payload size of sacked skbs (Eric Dumazet) [Orabug: 29884301]

[4.14.35-1902.1.2]
- libnvdimm/of_pmem: Fix platform_no_drv_owner.cocci warnings (YueHaibing) [Orabug: 29827576]
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (Wei Yang) [Orabug: 29827576]
- libnvdimm/btt: Fix LBA masking during 'free list' population (Vishal Verma) [Orabug: 29827576]
- libnvdimm/btt: Remove unnecessary code in btt_freelist_init (Vishal Verma) [Orabug: 29827576]
- acpi/nfit: Update NFIT flags error message (Toshi Kani) [Orabug: 29827576]
- libnvdimm/namespace: Clean up holder_class_store() (Dan Williams) [Orabug: 29827576]
- libnvdimm/pfn: Remove dax_label_reserve (Dan Williams) [Orabug: 29827576]
- dax: Check the end of the block-device capacity with dax_direct_access() (Dan Williams) [Orabug: 29827576]
- nfit/ars: Avoid stale ARS results (Dan Williams) [Orabug: 29827576]
- nfit/ars: Allow root to busy-poll the ARS state machine (Dan Williams) [Orabug: 29827576]
- nfit/ars: Introduce scrub_flags (Dan Williams) [Orabug: 29827576]
- nfit/ars: Remove ars_start_flags (Dan Williams) [Orabug: 29827576]
- nfit/ars: Attempt short-ARS even in the no_init_ars case (Dan Williams) [Orabug: 29827576]
- nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot (Dan Williams) [Orabug: 29827576]
- acpi/nfit: Require opt-in for read-only label configurations (Dan Williams) [Orabug: 29827576]
- libnvdimm/pmem: Honor force_raw for legacy pmem regions (Dan Williams) [Orabug: 29827576]
- libnvdimm/pfn: Account for PAGE_SIZE > info-block-size in nd_pfn_init() (Dan Williams) [Orabug: 29827576]
- libnvdimm/dimm: Add a no-BLK quirk based on NVDIMM family (Dan Williams) [Orabug: 29827576]
- nfit: Fix nfit_intel_shutdown_status() command submission (Dan Williams) [Orabug: 29827576]
- libnvdimm/label: Clear 'updating' flag after label-set update (Dan Williams) [Orabug: 29827576]
- nfit: Add Hyper-V NVDIMM DSM command set to white list (Dexuan Cui) [Orabug: 29827576]
- hugetlbfs: boot failure if gigantic pages allocated on command line (Mike Kravetz) [Orabug: 29811544]
- Revert 'net_failover: delay taking over primary device to accommodate udevd renaming' (Si-Wei Liu) [Orabug: 29707254]
- failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu) [Orabug: 29707254]
- xfs: add lazytime mount option (Darrick J. Wong) [Orabug: 29609388]
- iversion: make inode_cmp_iversion{+raw} return bool instead of s64 (Jeff Layton) [Orabug: 29609388]
- xfs: implement the lazytime mount option (Christoph Hellwig) [Orabug: 29609388]
- fs: dont clear I_DIRTY_TIME before calling mark_inode_dirty_sync (Christoph Hellwig) [Orabug: 29609388]
- fs: handle inode->i_version more efficiently (Jeff Layton) [Orabug: 29609388]
- btrfs: only dirty the inode in btrfs_update_time if something was changed (Jeff Layton) [Orabug: 29609388]
- xfs: avoid setting XFS_ILOG_CORE if i_version doesnt need incrementing (Jeff Layton) [Orabug: 29609388]
- fs: only set S_VERSION when updating times if necessary (Jeff Layton) [Orabug: 29609388]
- IMA: switch IMA over to new i_version API (Jeff Layton) [Orabug: 29609388]
- xfs: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- ufs: use new i_version API (Jeff Layton) [Orabug: 29609388]
- ocfs2: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- nfsd: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- nfs: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- ext4: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- ext2: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- exofs: switch to new i_version API (Jeff Layton) [Orabug: 29609388]
- btrfs: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- afs: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- affs: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- fat: convert to new i_version API (Jeff Layton) [Orabug: 29609388]
- fs: dont take the i_lock in inode_inc_iversion (Jeff Layton) [Orabug: 29609388]
- fs: new API for handling inode->i_version (Jeff Layton) [Orabug: 29609388]
- orangefs: remove initialization of i_version (Jeff Layton) [Orabug: 29609388]
- nilfs2: remove inode->i_version initialization (Jeff Layton) [Orabug: 29609388]
- jfs: remove increment of i_version counter (Jeff Layton) [Orabug: 29609388]
- hpfs: dont bother with the i_version counter or f_version (Jeff Layton) [Orabug: 29609388]
- f2fs: dont bother with inode->i_version (Jeff Layton) [Orabug: 29609388]
- ceph: remove the bump of i_version (Jeff Layton) [Orabug: 29609388]
- ecryptfs: remove unnecessary i_version bump (Jeff Layton) [Orabug: 29609388]
- EDAC: Drop per-memory controller buses (Borislav Petkov) [Orabug: 29721320]
- EDAC: Dont add devices under /sys/bus/edac (Tony Luck) [Orabug: 29721320]
- EDAC: Raise the maximum number of memory controllers (Justin Ernst) [Orabug: 29721320]
- EDAC, skx_edac: Handle systems with segmented PCI busses (Tony Luck) [Orabug: 29721320]
- block: delete part_round_stats and switch to less precise counting (Mikulas Patocka) [Orabug: 29223046]
- dm: simplify start of block stats accounting for bio-based (Mike Snitzer) [Orabug: 29223046]

[4.14.35-1902.1.1]
- ovl: hash non-dir by lower