Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-425.13.1_7.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-425.13.1_7]
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221]
- mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221]
- mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221]
- mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221]
- mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221]
- mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221]
- mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221]
- mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221]
- mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221]
- mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221]
- mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221]
- mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221]
- ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881]
- mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222}
- x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222}
- mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222}
- mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222}
- s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967]
- i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801]
- i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873}
- iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493]
- iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493]
- iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493]
- iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493]
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428]
- x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428]
- PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428]
- x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428]
- PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428]
- x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428]
- x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428]
- x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428]
- iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428]
- iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428]
- x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428]
- iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428]
- PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428]
- PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428]
- x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428]
- x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428]
- x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428]
- iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428]
-