Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.514.3]
- uek-rpm: Update OL7 SecureBoot certificate files (Saeed Mirzamohammadi) [Orabug: 34219958]

[4.14.35-2047.514.2]
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34207044] {CVE-2022-1729}
- debug: Lock down kgdb (Stephen Brennan) [Orabug: 34207043] {CVE-2022-21499}

[4.14.35-2047.514.1]
- uek: kabi: Correct kABI symbols (Saeed Mirzamohammadi) [Orabug: 34162205]
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai) [Orabug: 34007906] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai) [Orabug: 34007906] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai) [Orabug: 34007906] {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai) [Orabug: 34007906] {CVE-2022-1048}
- Revert 'net: micrel: fix KS8851_MLL Kconfig' (Marek Vasut)
- Revert 'net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link' (Greg Kroah-Hartman)
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu)

[4.14.35-2047.514.0]
- memstick: rtsx_usb_ms: fix UAF (Tong Zhang) [Orabug: 34132125] {CVE-2022-0487}
- A/A Bonding: Allow setting rdmaip_active_bonding_failback param (Sharath Srinivasan) [Orabug: 34130294]
- drm/vgem: Close use-after-free race in vgem_gem_create (Daniel Vetter) [Orabug: 34111756]
- drm/vgem: Reclassify buffer creation debug message (Chris Wilson) [Orabug: 34111756]
- nbd: Fix NULL pointer in flush_workqueue (Sun Ke) [Orabug: 34111753]
- IB/cma: Allow XRC INI QPs to set their local ACK timeout (Hakon Bugge) [Orabug: 34094202]
- vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong) [Orabug: 34084997]
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong) [Orabug: 34084997]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner) [Orabug: 34084997]
- xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong) [Orabug: 34084997]
- rds/ib: Fix ib_rx_total_frags while freeing frags (Praveen Kumar Kannoju) [Orabug: 34066623]
- rds: ib: Force 16-byte alignment on rds_ib_device (Hakon Bugge) [Orabug: 34043118]
- rds: ib: INFO: trying to register non-static key during rmmod (Freddy Carrillo) [Orabug: 34041727]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay) [Orabug: 26526968] [Orabug: 33602562]
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky) [Orabug: 26526923] [Orabug: 33602562]
- Linux 4.14.276 (Greg Kroah-Hartman)
- i2c: pasemi: Wait for write xfers to finish (Martin Poviser)
- smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)
- ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)
- ALSA: pcm: Test for 'silence' field in struct 'pcm_format_data' (Fabio M. De Francesco)
- gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)
- mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)
- drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)
- scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)
- gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)
- net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)
- scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)
- drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)
- drm/amd: Add USBC connector ID (Aurabindo Pillai)
- cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)
- nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)
- mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)
- gpiolib: acpi: use correct format characters (Linus Torvalds)
- veth: Ensure eth header is in skb's linear part (Guillaume Nault)
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)
- xfrm: policy: match with both mark and mask on user interfaces (Xin Long)
- cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo)
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (Tejun Heo)
- cgroup: Use open-time credentials for process migraton perm checks (Tejun Heo)
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long)
- arm64: module: remove (NOLOAD) from linker script (Fangrui Song)
- mm: don't skip swap entry even if zap_details specified (Peter Xu)
- dmaengine: Revert 'dmaengine: shdma: Fix runtime PM imbalance on error' (Vinod Koul)
- tools build: Use instead of to get embedded libperl's ccopts (Arnaldo Carvalho de Melo)
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)
- arm64: patch_text: Fixup last cpu should be master (Guo Ren)
- btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)
- x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta)
- x86/pm: Save the MSR validity status at context setup (Pawan Gupta)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)
- Revert 'mmc: sdhci-xenon: fix annoying 1.8V regulator warning' (Pali Rohar)
- drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)
- drm/imx: Fix memory leak in imx_pd_connector_get_modes (Jose Exposito)
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsa