Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.512.6.el7]
- Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271]
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774]

[4.14.35-2047.512.5]
- netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34012925] {CVE-2022-1016}
- rds: Fix incorrect initialization order (Hakon Bugge) [Orabug: 33923372]
- btrfs: unlock newly allocated extent buffer after error (Qu Wenruo) [Orabug: 33997138] {CVE-2021-4149}
- sr9700: sanity check for packet length (Oliver Neukum) [Orabug: 33962706] {CVE-2022-26966}

[4.14.35-2047.512.4]
- Linux 4.14.265 (Greg Kroah-Hartman)
- ext4: fix error handling in ext4_restore_inline_data() (Ritesh Harjani)
- EDAC/xgene: Fix deferred probing (Sergey Shtylyov)
- EDAC/altera: Fix deferred probing (Sergey Shtylyov)
- rtc: cmos: Evaluate century appropriate (Riwen Lu)
- selftests: futex: Use variable MAKE instead of make (Muhammad Usama Anjum)
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. (Dai Ngo)
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (John Meneghini)
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe (Miaoqian Lin)
- drm/i915/overlay: Prevent divide by zero bugs in scaling (Dan Carpenter)
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly (Lior Nahmanson)
- net: ieee802154: Return meaningful error codes from the netlink helpers (Miquel Raynal)
- net: ieee802154: ca8210: Stop leaking skb's (Miquel Raynal)
- spi: meson-spicc: add IRQ check in meson_spicc_probe (Miaoqian Lin)
- spi: mediatek: Avoid NULL pointer crash in interrupt (Benjamin Gaignard)
- spi: bcm-qspi: check for valid cs before applying chip select (Kamal Dasu)
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (Joerg Roedel)
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (Guoqing Jiang)
- RDMA/mlx4: Don't continue event handler after memory allocation failure (Leon Romanovsky)
- block: bio-integrity: Advance seed correctly for larger interval sizes (Martin K. Petersen)
- drm/nouveau: fix off by one in BIOS boundary checking (Nick Lopez)
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Mark Brown)
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Mark Brown)
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (Mark Brown)
- audit: improve audit queue handling when 'audit=1' on cmdline (Paul Moore)
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt (Eric Dumazet)
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (Eric Dumazet)
- net: amd-xgbe: Fix skb data length underflow (Shyam Sundar S K)
- net: amd-xgbe: ensure to reset the tx_timer_active flag (Raju Rangoju)
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (Georgi Valkov)
- netfilter: nat: limit port clash resolution attempts (Florian Westphal)
- netfilter: nat: remove l4 protocol port rovers (Florian Westphal)
- bpf: fix truncated jump targets on heavy expansions (Daniel Borkmann)
- ipv4: raw: lock the socket in raw_bind() (Eric Dumazet)
- yam: fix a memory leak in yam_siocdevprivate() (Hangyu Hua)
- ibmvnic: don't spin in tasklet (Sukadev Bhattiprolu)
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (Jose Exposito)
- drm/msm: Fix wrong size calculation (Xianting Tian)
- net-procfs: show net devices bound packet types (Jianguo Wu)
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file (Trond Myklebust)
- NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)
- hwmon: (lm90) Reduce maximum conversion rate for G781 (Guenter Roeck)
- ping: fix the sk_bound_dev_if match in ping_lookup (Xin Long)
- net: fix information leakage in /proc/net/ptype (Saeed Mirzamohammadi)
- ipv6_tunnel: Rate limit warning messages (Ido Schimmel)
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (John Meneghini)
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev (Matthias Kaehlcke)
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (Sujit Kautkar)
- i40e: fix unsigned stat widths (Joe Damato)
- i40e: Increase delay to 1 s after global EMP reset (Jedrzej Jagielski)
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() (Christophe Leroy)
- powerpc/32: Fix boot failure with GCC latent entropy plugin (Christophe Leroy)
- net: sfp: ignore disabled SFP node (Marek Behun)
- usb: typec: tcpm: Do not disconnect while receiving VBUS off (Badhri Jagan Sridharan)
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (Pavankumar Kondeti)
- usb: common: ulpi: Fix crash in ulpi_match() (Jon Hunter)
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge (Alan Stern)
- tty: Add support for Brainboxes UC cards. (Cameron Williams)
- tty: n_gsm: fix SW flow control encoding/handling (daniel.starke@siemens.com)
- serial: stm32: fix software flow control transfer (Valentin Caron)
- netfilter: nft_payload: do not update layer 4 checksum when mangling fragments (Pablo Neira Ayuso)
- PM: wakeup: simplify the output logic of pm_show_wakelocks() (Greg Kroah-Hartman)
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (Steffen Maier)
- s390/hypfs: include z/VM guests with access control group set (Vasily Gorbik)
- Bluetooth: refactor malicious adv data check (Brian Gix)
- Linux 4.14.264 (Greg Kroah-Hartman)
- can: bcm: fix UAF of bcm op (Ziyang Xuan)
- Linux 4.14.263 (Greg Kroah-Hartman)
- gianfar: fix jumbo packets+napi+rx overrun crash (Michael Braun)
- gianfar: simplify FCS handling and fix memory leak (Andy Spencer)
- drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)
- mips,s390,sh,sparc: gup: Work around the 'COW can break either way' issue (Be