Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.504.2.el7]
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159]
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879]
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft)) [Orabug: 32856879]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley) [Orabug: 32856879]
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860493] {CVE-2021-31916}
- net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry) [Orabug: 32559464]
- Linux 4.14.210 (Greg Kroah-Hartman)
- USB: core: Fix regression in Hercules audio card (Alan Stern)
- USB: core: add endpoint-blacklist quirk (Johan Hovold)
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)
- usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)
- usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)
- USB: core: Change %pK for __user pointers to %px (Alan Stern)
- perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)
- can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)
- can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)
- efivarfs: revert 'fix memory leak in efivarfs_create()' (Ard Biesheuvel)
- ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)
- net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)
- IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)
- scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)
- batman-adv: set .owner to THIS_MODULE (Taehee Yoo)
- phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)
- perf/x86: fix sysfs type mismatches (Sami Tolvanen)
- scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)
- scsi: libiscsi: Fix NOP race condition (Lee Duncan)
- dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)
- nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)
- proc: don't allow async path resolution of /proc/self components (Jens Axboe)
- HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)
- x86/xen: don't unbind uninitialized lock_kicker_irq (Brian Masney)
- dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)
- HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)
- HID: cypress: Support Varmilo Keyboards' media hotkeys (Frank Yang)
- ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (Kai Vehmanen)
- ALSA: hda/hdmi: Use single mutex unlock in error paths (Takashi Iwai)
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)
- arm64: pgtable: Fix pte_accessible() (Will Deacon)
- btrfs: adjust return values of btrfs_inode_by_name (Su Yue)
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (Qu Wenruo)
- PCI: Add device even if driver attach failed (Rajat Jain)
- wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)
- btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)
- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Gerald Schaefer)
- perf event: Check ref_reloc_sym before using it (Igor Lubashev)
- Linux 4.14.209 (Greg Kroah-Hartman)
- x86/microcode/intel: Check patch signature before saving microcode for early loading (Chen Yu)
- s390/dasd: fix null pointer dereference for ERP requests (Stefan Haberland)
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (Thomas Richter)
- mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg)
- mac80211: minstrel: fix tx status processing corner case (Felix Fietkau)
- mac80211: minstrel: remove deferred sampling code (Felix Fietkau)
- xtensa: disable preemption around cache alias management calls (Max Filippov)
- regulator: workaround self-referent regulators (Michal Miroslaw)
- regulator: avoid resolve_supply() infinite recursion (Michal Miroslaw)
- regulator: fix memory leak with repeated set_machine_constraints() (Michal Miroslaw)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (Hans de Goede)
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (Hans de Goede)
- ext4: fix bogus warning in ext4_update_dx_flag() (Jan Kara)
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (Brian O'Keefe)
- efivarfs: fix memory leak in efivarfs_create() (Vamshi K Sthambamkadi)
- tty: serial: imx: keep console clocks always on (Fugang Duan)
- ALSA: mixart: Fix mutex deadlock (Takashi Iwai)
- ALSA: ctl: fix error path at adding user-defined element set (Takashi Sakamoto)
- speakup: Do not let the line discipline be used several times (Samuel Thibault)
- powerpc/uaccess-flush: fix missing includes in kup-radix.h (Daniel Axtens)
- libfs: fix error cast of negative value in simple_attr_write() (Yicong Yang)
- xfs: revert 'xfs: fix rmap key and record comparison functions' (Darrick J. Wong)
- regulator: ti-abb: Fix array out of bound read access on the first transition (Nishanth Menon)
- MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu (Zhang Qilong)
- ASoC: qcom: lpass-platform: Fix memory leak (Srinivasa Rao Mandadapu)
- can: m_can: m_can_handle_state_change(): fix state change (Wu Bo)
- can: peak_usb: fix potential integer overflow on shift of a int (Colin Ian King)