Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.506.8]
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33187189]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33187192]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33187195]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33187199]
- rds: ib: Increase entropy of RDMA IOVAs (Hakon Bugge) [Orabug: 33187200]

[4.14.35-2047.506.7]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33167357]
- Revert 'x86/reboot: Force all cpus to exit VMX root if VMX is supported' (Somasundaram Krishnasamy) [Orabug: 33167350]

[4.14.35-2047.506.6]
- rds: Check for illegal flags when creating an MR (Hakon Bugge) [Orabug: 33144339]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33135633] {CVE-2021-33909}

[4.14.35-2047.506.5]
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 33131619]

[4.14.35-2047.506.4]
- rds/ib: avoid use of trace_printk() (Alan Maguire) [Orabug: 33120588]
- RDMA/cma: Remove unnecessary INIT->INIT transition (Hakon Bugge) [Orabug: 33114515]
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan) [Orabug: 33027709]

[4.14.35-2047.506.3]
- capmem: Mark the pages as non-readonly+dirty. (David Clear) [Orabug: 33116008]
- PCI/ERR: Retain status from error notification (Keith Busch) [Orabug: 32747989]
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo) [Orabug: 33106366]
- net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk) [Orabug: 31895299] {CVE-2020-14304}

[4.14.35-2047.506.2]
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins) [Orabug: 33089240]
- mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi) [Orabug: 33042327]
- mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi) [Orabug: 33042327]
- mm: soft-offline: close the race against page allocation (Naoya Horiguchi) [Orabug: 33042327]
- mm: fix race on soft-offlining free huge pages (Naoya Horiguchi) [Orabug: 33042327]
- Revert 'xen/fb: allow xenfb initialization for hvm guests' (Joe Jin) [Orabug: 33075317]
- scsi: qla2xxx: Fix use after free in bsg (Quinn Tran) [Orabug: 32912131]
- block: fix a race between del_gendisk and BLKRRPART (Gulam Mohamed) [Orabug: 32285697]
- block: prevent block device lookups at the beginning of del_gendisk (Christoph Hellwig) [Orabug: 32285697]
- block: take bd_mutex around delete_partitions in del_gendisk (Christoph Hellwig) [Orabug: 32285697]
- Linux 4.14.231 (Greg Kroah-Hartman)
- xen/events: fix setting irq affinity (Juergen Gross)
- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)
- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)
- block: only update parent bi_status when bio fail (Yufen Yu)
- gfs2: report 'already frozen/thawed' errors (Bob Peterson)
- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)
- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)
- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)
- Revert 'cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.' (Greg Kroah-Hartman)
- net: ieee802154: stop dump llsec params for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)
- net: ieee802154: forbid monitor for set llsec params (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)
- net: ieee802154: fix nl802154 add llsec key (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec key (Alexander Aring)
- net: ieee802154: nl-mac: fix check on panid (Alexander Aring)
- net: mac802154: Fix general protection fault (Pavel Skripkin)
- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)
- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)
- net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter)
- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)
- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)
- net/ncsi: Avoid GFP_KERNEL in response handler (Samuel Mendoza-Jonas)
- net/ncsi: Refactor MAC, VLAN filters (Samuel Mendoza-Jonas)
- net/ncsi: Add generic netlink family (Samuel Mendoza-Jonas)
- net/ncsi: Don't return error on normal response (Samuel Mendoza-Jonas)
- net/ncsi: Improve general state logging (Samuel Mendoza-Jonas)
- net/ncsi: Make local function ncsi_get_filter() static (Wei Yongjun)
- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)
- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)
- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)
- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)
- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)
- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)
- clk: fix invalid usage of list cursor in register (Lukasz Bartosik)
- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)
- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)
- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)
- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)
- gianfar: Handle error code at MAC address change (Claudiu Manoil)
- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)
- amd-xgbe: Upd