Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.2.el7]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33876756] {CVE-2022-0492}
- scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed) [Orabug: 33876755]

[4.14.35-2047.511.5.1]
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (Ard Biesheuvel) [Orabug: 33836770]

[4.14.35-2047.511.5]
- irq/msi: add extra step when both old and new affinity are not current cpu (Joe Jin) [Orabug: 33789982]
- Revert rds/ib: Kernel change to extend rds-info functionality (Rohit Nair) [Orabug: 33795472]
- smp: always continue to process IRQ work (Stephen Brennan) [Orabug: 33775326]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie) [Orabug: 33674803]
- scsi: libiscsi: Drop taskqueuelock (Mike Christie) [Orabug: 33674803]
- netfilter: fix regression in looped (broad|multi)casts MAC handling (Ignacy Gawedzki)
- PM: hibernate: use correct mode for swsusp_close() (Thomas Zeitlhofer)
- tracefs: Set all files to the same group ownership as the mount option (Steven Rostedt (VMware))
- binder: fix test regression due to sender_euid change (Todd Kjos)
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (Jose Exposito)

[4.14.35-2047.511.4]
- net/rds: Refactor rds_ib_recv_refill_one (Freddy Carrillo) [Orabug: 33811840]
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan) [Orabug: 33811824]
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [Orabug: 33811779]
- rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge) [Orabug: 33810922]
- arm64: pcie: Intercept Pensando specific SError (Henry Willard) [Orabug: 33811771]
- arm64: pcie: Change bad_mode hook to cap_pciep_access_in_progress() (Henry Willard) [Orabug: 33811771]
- arm64: pcie: Remove Pensando SError trapping patch (Henry Willard) [Orabug: 33811771]
- take care multiple extents in CoW extent converting (Wengang Wang) [Orabug: 33811755]

[4.14.35-2047.511.3]
- scsi: vmw_pvscsi: Set residual data length conditionally (Alexey Makhalov) [Orabug: 33761308]
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong) [Orabug: 33757273]
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong) [Orabug: 33757273]
- arm64/efi: remove spurious WARN_ON for !4K kernels (Mark Rutland) [Orabug: 33749641]
- irqchip/gic-v3-its: Allow use of LPI tables in reserved memory (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Register LPI tables with EFI config table (Marc Zyngier) [Orabug: 33749641]
- efi: add API to reserve memory persistently across kexec reboot (Ard Biesheuvel) [Orabug: 33749641]
- efi/arm: libstub: add a root memreserve config table (Ard Biesheuvel) [Orabug: 33749641]
- efi: honour memory reservations passed via a linux specific config table (Ard Biesheuvel) [Orabug: 33749641]
- irqchip/gic-v3-its: Check that all RDs have the same property table (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump kernels (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Allow use of pre-programmed LPI tables (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Keep track of property tables PA and VA (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Move pending table allocation to init time (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Split property table clearing from allocation (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Change initialization ordering for LPIs (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Jia He) [Orabug: 33749641]
- irqchip/gic-v3-its: Make its_lock a raw_spin_lock_t (Sebastian Andrzej Siewior) [Orabug: 33749641]
- irqchip/gic-v3-its: Honor hypervisor enforced LPI range (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3: Expose GICD_TYPER in the rdist structure (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Drop chunk allocation compatibility (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Move minimum LPI requirements to individual busses (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Use full range of LPIs (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Refactor LPI allocator (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Fix reprogramming of redistributors on CPU hotplug (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Only emit VSYNC if targetting a valid collection (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3-its: Only emit SYNC if targetting a valid collection (Marc Zyngier) [Orabug: 33749641]
- irqchip/gic-v3: Ensure GICR_CTLR.EnableLPI=0 is observed before enabling (Shanker Donthineni) [Orabug: 33749641]
- irqchip/gic-v3-its: Pass its_node pointer to each command builder (Marc Zyngier) [Orabug: 33749641]
- tee: handle lookup of shm with reference count 0 (Jens Wiklander) [Orabug: 33739583] {CVE-2021-44733}
- rds/ib: Kernel change to extend rds-info functionality (Rohit Nair) [Orabug: 33660978]
- net/mlx5: Fix eeprom support for SFP module (Eran Ben Elisha) [Orabug: 33541468]
- x86/vector: search CPU vector starts from last successfully assigned (Joe Jin) [Orabug: 33290504]

[4.14.35-2047.511.2]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33756155] {CVE-2021-4155}
- net/mlx5e: ethtool, Add support for EEPROM high pages query (Erez Alfasi) [Orabug: 33755527]
- ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions (Erez Alfasi) [Orabug: 33755527]
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy) [Orabug: 33731361]
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw) [Orabug: 33730434]
- rds: ib: Incorporate the