Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.516.1.1]
- net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460938] {CVE-2022-2588}

[4.14.35-2047.516.1]
- KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) [Orabug: 34323860] {CVE-2022-2153}
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov) [Orabug: 34323860] {CVE-2022-2153}
- KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson) [Orabug: 34323860] {CVE-2022-2153}
- xfs: dont use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34180868]

[4.14.35-2047.516.0]
- scsi: mpt3sas: Remove scsi_dma_map() error messages (Sreekanth Reddy) [Orabug: 34328903]
- uek: kabi: new protected symbols for USM in OL7 (Saeed Mirzamohammadi) [Orabug: 34233902]
- vfio/type1: add ioctl to check for correct pin accounting (Anthony Yznaga) [Orabug: 32967885]
- vfio/type1: track pages pinned by vfio across exec (Anthony Yznaga) [Orabug: 32967885]
- mm: track driver pinned pages across exec (Anthony Yznaga) [Orabug: 32967885]
- vfio/type1: Fix vfio_find_dma_valid return (Anthony Yznaga) [Orabug: 32967885]
- vfio/type1: fix unmap all on ILP32 (Steve Sistare) [Orabug: 32967885]
- vfio/type1: block on invalid vaddr (Steve Sistare) [Orabug: 32967885]
- vfio/type1: implement notify callback (Steve Sistare) [Orabug: 32967885]
- vfio: iommu driver notify callback (Steve Sistare) [Orabug: 32967885]
- vfio/type1: implement interfaces to update vaddr (Steve Sistare) [Orabug: 32967885]
- vfio/type1: massage unmap iteration (Steve Sistare) [Orabug: 32967885]
- vfio: interfaces to update vaddr (Steve Sistare) [Orabug: 32967885]
- vfio/type1: implement unmap all (Steve Sistare) [Orabug: 32967885]
- vfio/type1: unmap cleanup (Steve Sistare) [Orabug: 32967885]
- vfio: option to unmap all (Steve Sistare) [Orabug: 32967885]
- Linux 4.14.284 (Greg Kroah-Hartman)
- x86/speculation/mmio: Print SMT warning (Josh Poimboeuf)
- x86/cpu: Add another Alder Lake CPU to the Intel family (Gayatri Kammela)
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)
- x86/cpu: Add Comet Lake to the Intel CPU models header (Kan Liang)
- x86/cpu: Add Cannonlake to Intel family (Rajneesh Bhardwaj)
- x86/cpu: Add Jasper Lake to Intel family (Zhang Rui)
- cpu/speculation: Add prototype for cpu_show_srbds() (Guenter Roeck)
- x86/cpu: Add Elkhart Lake to Intel family (Gayatri Kammela)
- Linux 4.14.283 (Greg Kroah-Hartman)
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd (Eric Dumazet)
- PCI: qcom: Fix unbalanced PHY init on probe errors (Johan Hovold)
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N (Tokunori Ikegami)
- mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write (Tokunori Ikegami)
- md/raid0: Ignore RAID0 layout if the second zone has only one device (Pascal Hambourg)
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace (Michael Ellerman)
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (Mathias Nyman)
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF (Olivier Matz)
- ixgbe: fix bcast packets Rx on VF after promisc removal (Olivier Matz)
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (Martin Faltesek)
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek)
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (Sergey Shtylyov)
- cifs: return errors during session setup during reconnects (Shyam Prasad N)
- ALSA: hda/conexant - Fix loopback issue with CX20632 (huangwenhui)
- vringh: Fix loop descriptors check in the indirect cases (Xie Yongji)
- nodemask: Fix return values to be unsigned (Kees Cook)
- nbd: fix io hung while disconnecting device (Yu Kuai)
- nbd: fix race between nbd_alloc_config() and module removal (Yu Kuai)
- nbd: call genl_unregister_family() first in nbd_cleanup() (Yu Kuai)
- modpost: fix undefined behavior of is_arm_mapping_symbol() (Masahiro Yamada)
- drm/radeon: fix a possible null pointer dereference (Gong Yuanjun)
- Revert net: af_key: add check for pfkey_broadcast in function pfkey_process (Michal Kubecek)
- md: protect md_unregister_thread from reentrancy (Guoqing Jiang)
- kernfs: Separate kernfs_pr_cont_buf and rename_lock. (Hao Luo)
- serial: msm_serial: disable interrupts in __msm_console_write() (John Ogness)
- staging: rtl8712: fix uninit-value in r871xu_drv_init() (Wang Cheng)
- clocksource/drivers/sp804: Avoid error on multiple instances (Andre Przywara)
- extcon: Modify extcon device to be created after driver data is set (bumwoo lee)
- misc: rtsx: set NULL intfdata when probe fails (Shuah Khan)
- usb: dwc2: gadget: dont reset gadgets driver->bus (Marek Szyprowski)
- USB: hcd-pci: Fully suspend across freeze/thaw cycle (Evan Green)
- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (Duoming Zhou)
- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (Duoming Zhou)
- USB: host: isp116x: check return value after calling platform_get_resource() (Zhen Ni)
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (Duoming Zhou)
- tty: Fix a possible resource leak in icom_probe (Huang Guobin)
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (Zheyu Ma)
- lkdtm/usercopy: Expand size of out of frame object (Kees Cook)
- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (Xiaoke Wang)
- drm: imx: fix compiler warning with gcc-12 (Linus Torvalds)
- net: altera: Fix refcount leak in altera_tse_mdio_create (Miaoqian Lin)
- net: ipv6: unexport __init-annotated seg6_hmac_init() (Masahiro Yamada)
- net: xfrm: unexport __init-annotated xfrm4_protocol_init() (Masahiro Yamada)
- net: mdio: unexport __init-annotated mdio_bus_init() (Masahiro Yamada)
- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() (Chuck L