Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.4.8]
- x86/boot: Clear RSDP address in boot_params for broken loaders (Juergen Gross) [Orabug: 30111373]

[4.14.35-1902.4.7]
- rds: ib: Qualify CM REQ duplicate detection with connection being up (Hakon Bugge) [Orabug: 30062149]
- rds: Further prioritize local loop-back connections (Hakon Bugge) [Orabug: 30062149]
- rds: Fix initial zero delay when queuing re-connect work (Hakon Bugge) [Orabug: 30062149]
- rds: Re-introduce separate work-queue for local connections (Hakon Bugge) [Orabug: 30062149]
- mm: Fixes /proc/vmstat bad values. (Chris Hyser) [Orabug: 29922051]
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Dongli Zhang) [Orabug: 30068152]
- ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (Jann Horn) [Orabug: 30074408] {CVE-2019-13272}
- Input: gtco - bounds check collection indent level (Grant Hernandez) [Orabug: 30074412] {CVE-2019-13631}

[4.14.35-1902.4.6]
- x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner) [Orabug: 29967570] {CVE-2019-1125}
- x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf) [Orabug: 29967570] {CVE-2019-1125}
- x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf) [Orabug: 29967570] {CVE-2019-1125}
- scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi) [Orabug: 30109946]
- rds: Not all huge pages are released after app shutdown (Ka-Cheong Poon) [Orabug: 30095424]

[4.14.35-1902.4.5]
- xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora) [Orabug: 30028199]
- KVM: x86: Allow Qemu/KVM to use PVH entry point (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Add memory map pointer to hvm_start_info struct (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Move Xen code for getting mem map via hcall out of common file (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Move Xen specific PVH VM initialization out of common file (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Create a new file for Xen specific PVH code (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Move PVH entry code out of Xen specific tree (Maran Wilson) [Orabug: 30072494]
- xen/pvh: Split CONFIG_XEN_PVH into CONFIG_PVH and CONFIG_XEN_PVH (Maran Wilson) [Orabug: 30072494]
- x86/acpi, x86/boot: Take RSDP address from boot params if available (Juergen Gross) [Orabug: 30072494]
- x86/boot: Mostly revert commit ae7e1238e68f2a ('Add ACPI RSDP address to setup_header') (Juergen Gross) [Orabug: 30072494]
- x86/acpi, x86/boot: Take RSDP address for boot params if available (Juergen Gross) [Orabug: 30072494]
- ACPI, x86/boot: Introduce the ->reduced_hw_early_init() ACPI callback (Andy Shevchenko) [Orabug: 30072494]
- ACPI, x86/boot: Split out acpi_generic_reduce_hw_init() and export (Andy Shevchenko) [Orabug: 30072494]
- x86/boot: Add ACPI RSDP address to setup_header (Juergen Gross) [Orabug: 30072494]
- x86/xen: Move pv irq related functions under CONFIG_XEN_PV umbrella (Juergen Gross) [Orabug: 30072494]
- bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix statistics context reservation logic for RDMA driver. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Disable bus master during PCI shutdown and driver unload. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Reduce memory usage when running in kdump kernel. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix(). (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix aggregation buffer leak under OOM condition. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Add support for aRFS on 57500 chips. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Query firmware capability to support aRFS on 57500 chips. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Improve NQ reservations. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Separate RDMA MR/AH context allocation. (Devesh Sharma) [Orabug: 30095123]
- bnxt_en: read the clause type from the PHY ID (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Read package version from firmware. (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Check new firmware capability to display extended stats. (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Add support for PCIe statistics (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Refactor bnxt_alloc_stats(). (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Update firmware interface to 1.10.0.69. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt(). (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix statistics context reservation logic. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Pass correct extended TX port statistics size to firmware. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Improve multicast address setup logic. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Improve RX consumer index validity check. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Return relevant error code when offload fails (Sriharsha Basavapatna) [Orabug: 30095123]
- bnxt_en: Add support for mdio read/write to external PHY (Vasundhara Volam) [Orabug: 30095123]
- bnxt_en: Propagate trusted VF attribute to firmware. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Add support for BCM957504 (Erik Burrows) [Orabug: 30095123]
- bnxt_en: Update firmware interface spec. to 1.10.0.47. (Michael Chan) [Orabug: 30095123]
- bnxt_en: Disable interrupts when allocating CP rings or NQs. (Michael