Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.500.9.1]
- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930}
- xen-scsiback: dont 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931}
- xen-netback: dont 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931}
- xen-blkback: dont 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931}
- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich) [Orabug: 32492094] {CVE-2021-26932}
- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich) [Orabug: 32492094] {CVE-2021-26932}
- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich) [Orabug: 32492094] {CVE-2021-26932}
- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich) [Orabug: 32492094] {CVE-2021-26932}

[4.14.35-2047.500.9]
- Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426612]
- A/A Bonding: Add synchronized bundle failback (Gerd Rausch) [Orabug: 31175013]
- net/rds: Incorrect RDS protocol version fall back (Ka-Cheong Poon) [Orabug: 32376163]
- net/rds: Missing RDS/RDMA private data in response to connection request (Ka-Cheong Poon) [Orabug: 32388407]

[4.14.35-2047.500.8]
- uek-rpm: update kABI lists for new symbol (Dan Duval) [Orabug: 32341032]
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry) [Orabug: 32372161]
- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380826]
- x86/process: Mark cpu inactive before offlining (Mridula Shastry) [Orabug: 32245078]
- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge) [Orabug: 32350976]
- net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel Levkovich) [Orabug: 32368440]
- net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov) [Orabug: 32368440]
- net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Denis Drozdov) [Orabug: 32368440]
- net/mlx5: Expose DEVX specification (Yishai Hadas) [Orabug: 32368440]
- target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248037] {CVE-2020-28374}

[4.14.35-2047.500.7]
- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi) [Orabug: 32047319]
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253411] {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park) [Orabug: 32253411] {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park) [Orabug: 32253411] {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park) [Orabug: 32253411] {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park) [Orabug: 32253411] {CVE-2020-29568}
- xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260255] {CVE-2020-29569}
- lockd: dont use interval-based rebinding over TCP (Calum Mackay) [Orabug: 32337717]
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349205] {CVE-2020-36158}
- add license checking to kABI checker (Dan Duval) [Orabug: 32355208]

[4.14.35-2047.500.6]
- net/rds: Only yield with a valid 'i_connecting_ts' timestamp (Gerd Rausch) [Orabug: 31030774]
- net/rds: Only increment rdma_resolve_route timeout on error (Gerd Rausch) [Orabug: 31030774]
- net/rds: Dont block workqueues 'cma_wq' and 'cm.wq' (Gerd Rausch) [Orabug: 31030774]
- net/rds: Dont drop neighbor loopback connection (Gerd Rausch) [Orabug: 31030774]
- net/rds: Take the GID offset into account for IB devices (Gerd Rausch) [Orabug: 31030774]
- net/rds: Leave the neighbor cache alone (Gerd Rausch) [Orabug: 31030774]
- net/rds: Give each connection its own workqueue (Gerd Rausch) [Orabug: 31030774]
- net/rds: Disassociate ic and cm_id before rdma_destroy_id (Gerd Rausch) [Orabug: 31030774]
- Revert 'rds: ib: Implement proper cm_id compare' (Gerd Rausch) [Orabug: 31030774]
- net/rds: Add a rdma_cm watchdog timer (Gerd Rausch) [Orabug: 31030774]
- Revert 'RDS: IB: fix panic with handlers running post teardown' (Gerd Rausch) [Orabug: 31030774]
- net/rds: Release all resources allocated by 'rds_ib_setup_qp' (Gerd Rausch) [Orabug: 31030774]
- net/rds: Change the 'rds_aux_wq' workqueue to loose order (Gerd Rausch) [Orabug: 31030774]
- net/rds: Dont sleep inside worker threads (Gerd Rausch) [Orabug: 31030774]
- net/rds: Fix a few race conditions (Gerd Rausch) [Orabug: 31030774]
- net/rds: Execute 'rdma_destroy_id' in the background (Gerd Rausch) [Orabug: 31030774]
- net/rds: Delay reconnects from passive side by 3 seconds (Gerd Rausch) [Orabug: 31030774]
- net/rds: Drop connections when peers perform failover (Gerd Rausch) [Orabug: 31030774]
- net/rds: Yield to incoming connection requests (Gerd Rausch) [Orabug: 31030774]
- net/rds: Remove stale comments about random backoff (Gerd Rausch) [Orabug: 31030774]

[4.14.35-2047.500.5]
- KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson) [Orabug: 32251912]
- tty: Fix ->session locking (Jann Horn) [Orabug: 32266679] {CVE-2020-29660}
- tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn) [Orabug: 32266679] {CVE-2020-29660}

[4.14.35-2047.500.4]
- bnxt_en: Release PCI regions when DMA mask setup fails during probe. (Michael Chan) [Orabug: 32223677]
- bnxt_en: fix error return code in bnxt_init_board() (Zhang Changzhong) [Orabug: 32223677]
- bnxt_en: fix error return code in bnxt_init_one() (Zhang Changzhong) [Orabug: 32223677]
- bnxt_en: Fix counter overflow logic. (Michael Chan) [Orabug: 32223677]
- bnxt_en: read EEPROM A2h address using page 0 (Edwin Peer) [Orabug: 32223677]
- bnxt_en: Re-write PCI BARs after PCI fatal error. (Vasundhara Volam) [Orabug: 32223677]
- bnxt_en: Set driver default message level. (Michael Chan) [Orabug: 32223677]
- bnxt_en: Enabl