Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-425.3.1.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-425.3.1]
- iwlwifi: limit fw version for AC9560 to avoid fw crash (Inigo Huguet) [2129297]
- sfc: fix null pointer dereference in efx_hard_start_xmit (Inigo Huguet) [2119638]
- sfc: fix TX channel offset when using legacy interrupts (Inigo Huguet) [2119638]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2047366]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2047366]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2047366]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2047366]
- netfilter: conntrack: remove pr_debug callsites from tcp tracker (Florian Westphal) [2047366]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2047366]
- netfilter: conntrack: improve RST handling when tuple is re-used (Florian Westphal) [2047366]
- netfilter: conntrack: avoid misleading invalid in log message (Florian Westphal) [2047366]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2047366]
- iavf: Detach device during reset task (Petr Oros) [2069206]

[4.18.0-425.2.1]
- EDAC/ghes: Set the DIMM label unconditionally (Aristeu Rozanski) [2109712]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2123508]

[4.18.0-425.1.1]
- i40e: Fix kernel crash during module removal (Ivan Vecera) [2091489]
- redhat: enable zstream release numbering for rhel 8.7 (Jarod Wilson)
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2102844]

[4.18.0-425]
- EDAC/amd64: Add new register offset support and related changes (Aristeu Rozanski) [2048792]
- EDAC/amd64: Set memory type per DIMM (Aristeu Rozanski) [2048792]
- Revert ixgbevf: Mailbox improvements (Ken Cox) [2120545]
- Revert ixgbevf: Add support for new mailbox communication between PF and VF (Ken Cox) [2120545]
- drm/amdgpu: Only disable prefer_shadow on hawaii (Lyude Paul) [2118755]

[4.18.0-424]
- redhat: configs: add CONFIG_SERIAL_MULTI_INSTANTIATE=m for x86_64 (Jaroslav Kysela) [2005073]
- ACPI: scan: Add CLSA0101 Laptop Support (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Add CLSA0101 Laptop (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Sort ACPI IDs by HID (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Get rid of redundant else (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Use while (i--) pattern to clean up (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Improve dev_err_probe() messaging (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Drop duplicate check (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Improve autodetection (Jaroslav Kysela) [2005073]
- ACPI / scan: Create platform device for CS35L41 (Jaroslav Kysela) [2005073]
- ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Add SPI support (Jaroslav Kysela) [2005073]
- platform/x86: serial-multi-instantiate: Reorganize I2C functions (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Rename it for a generic serial driver name (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Use the new i2c_acpi_client_count() helper (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Use device_get_match_data() to get driver data (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Simplify with dev_err_probe() (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Drop redundant ACPI_PTR() (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Replace zero-length array with flexible-array member (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Use struct_size() helper (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Allow to have same slaves (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Introduce IOAPIC IRQ support (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Distinguish IRQ resource type (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Count I2cSerialBus() resources (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Get rid of obsolete conditional (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Defer probe when no adapter found (Jaroslav Kysela) [2005073]
- platform/x86: i2c-multi-instantiate: Accept errors of i2c_acpi_new_device() (Jaroslav Kysela) [2005073]
- serdev: Fix detection of UART devices on Apple machines. (Jaroslav Kysela) [2005073]
- serdev: Add ACPI devices by ResourceSource field (Jaroslav Kysela) [2005073]
- spi: Return deferred probe error when controller isnt yet available (Jaroslav Kysela) [2005073]
- spi/acpi: avoid spurious matches during slave enumeration (Jaroslav Kysela) [2005073]
- spi: Add API to count spi acpi resources (Jaroslav Kysela) [2005073]
- spi: Support selection of the index of the ACPI Spi Resource before alloc (Jaroslav Kysela) [2005073]
- ACPI: Test for ACPI_SUCCESS rather than !ACPI_FAILURE (Jaroslav Kysela) [2005073]
- spi/acpi: fix incorrect ACPI parent check (Jaroslav Kysela) [2005073]
- spi: Create helper API to lookup ACPI info for spi device (Jaroslav Kysela) [2005073]
- spi/acpi: enumera