Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.508.3.el7]
- fuse: fix live lock in fuse_iget() (Amir Goldstein) [Orabug: 33396682] {CVE-2021-28950}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi) [Orabug: 33392821]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra) [Orabug: 33352735]

[4.14.35-2047.508.2]
- KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson) [Orabug: 33360245]
- Revert uek-rpm: mark /etc/ld.so.conf.d/ files as %config (aloktiw) [Orabug: 33359680]
- net/mlx5: Rate limit errors in command interface (Leon Romanovsky) [Orabug: 33305503]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33292634] {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33292634]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33292634] {CVE-2021-3564}
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje) [Orabug: 33134287]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje) [Orabug: 33134287]
- uek-rpm: Add dm-cache-smq.ko module (John Donnelly) [Orabug: 29198153]

[4.14.35-2047.508.1]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33324346]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter) [Orabug: 33329032]
- ip: Manual backport of pskb_inet_may_pull() (Hakon Bugge) [Orabug: 33329032]
- Revert Revert net: geneve: check skb is large enough for IPv4/IPv6 header (Hakon Bugge) [Orabug: 33329032]
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Tso) [Orabug: 33327179] {CVE-2021-40490}
- uek-rpm: add CONFIG_PVPANIC_PCI to aarch64 (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: fix set driver data (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic-pci: Allow automatic loading (Eric Auger) [Orabug: 33155642]
- misc/pvpanic: Remove some dead-code (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make pvpanic_probe() resource managed (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Fix error handling in pvpanic_mmio_probe() (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Fix error handling in pvpanic_pci_probe() (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make some symbols static (YueHaibing) [Orabug: 33155642]
- misc/pvpanic: fix return value check in pvpanic_pci_probe() (Qiheng Lin) [Orabug: 33155642]
- misc/pvpanic: add PCI driver (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: probe multiple instances (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: split-up generic and platform dependent code (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: Export module FDT device table (Shile Zhang) [Orabug: 33155642]
- misc: pvpanic: sysfs_emit uses should have a newline (Joe Perches) [Orabug: 33155642]
- misc: pvpanic: introduce events device attribue (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: introduce device capability (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: Check devm_ioport_map() for NULL (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Replace OF headers by mod_devicetable.h (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Combine ACPI and platform drivers (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Use devm_platform_ioremap_resource() (Wang ShaoBo) [Orabug: 33155642]
- driver core: platform: Introduce platform_get_mem_or_io() (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: move bit definition to uapi header file (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: fix warning implicit declaration (Anders Roxell) [Orabug: 33155642]
- misc/pvpanic: resolve compile errors for arch=um (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: fix a NULL vs IS_ERR() check (Dan Carpenter) [Orabug: 33155642]
- misc/pvpanic: remove a redundant comma (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: convert to SPDX license tags (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: change header file sort style (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: remove unnecessary header file (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : break dependency on ACPI (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : grouping ACPI related stuff (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add support to get pvpanic device info FDT (Peng Hao) [Orabug: 33155642]
- dt-bindings: misc/pvpanic: add document for pvpanic-mmio (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add MMIO support (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: simplify the code using acpi_dev_resource_io (Peng Hao) [Orabug: 33155642]
- pvpanic: move pvpanic to misc as common driver (Peng Hao) [Orabug: 33155642]
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 32769032] {CVE-2020-36322}
- Linux 4.14.243 (Greg Kroah-Hartman)
- spi: mediatek: Fix fifo transfer (Guenter Roeck)
- Revert watchdog: iTCO_wdt: Account for rebooting on second timeout (Greg Kroah-Hartman)
- KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() (Sean Christopherson)
- KVM: do not assume PTE is writable after follow_pfn (Paolo Bonzini)
- Revert Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Greg Kroah-Hartman)
- net: Fix zero-copy head len calculation. (Pravin B Shelar)
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)
- r8152: Fix potential PM refcount imbalance (Takashi Iwai)
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)
- Linux 4.14.242 (Greg Kroah-Hartman)
- Revert perf map: Fix dso->nsinfo refcounting (Arnaldo Carvalho de Melo)
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)
- sis90