Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.521.4.el7]
- tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra)
[Orabug: 34883100]

[4.14.35-2047.521.3.el7]
- Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed
Mirzamohammadi) [Orabug: 34918228]

[4.14.35-2047.521.2.el7]
- RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865849]
- IB/ipoib: Do not warn if IPoIB debugfs doesn't exist (Alaa Hleihel) [Orabug: 34780038]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378}

[4.14.35-2047.521.1.el7]
- net/mlx5: Use debug message instead of warn (Yishai Hadas) [Orabug: 34834553]
- hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772618]
- mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772618]
- mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772618]
- kvm: x86: limit the maximum number of vPMU fixed counters to 3 (Like Xu) [Orabug: 34756992]
- LTS version: v4.14.298 (Saeed Mirzamohammadi)
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das)
- net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang)
- openvswitch: switch from WARN to pr_warn (Aaron Conole)
- ALSA: aoa: Fix I2S device accounting (Takashi Iwai)
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang)
- PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla)
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang)
- i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba)
- i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba)
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil)
- media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil)
- media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil)
- media: vivid: s_fbuf: add more sanity checks (Hans Verkuil)
- PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello)
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu)
- tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell)
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong)
- kcm: annotate data-races around kcm->rx_wait (Eric Dumazet)
- kcm: annotate data-races around kcm->rx_psock (Eric Dumazet)
- amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju)
- amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju)
- x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin)
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang)
- arc: iounmap() arg is volatile (Randy Dunlap)
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry)
- net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun)
- mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)
- xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)
- Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich)
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens)
- kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt)
- mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma)
- drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold)
- mac802154: Fix LQI recording (Miquel Raynal)
- fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim)
- iio: light: tsl2583: Fix module unloading (Shreeya Patel)
- tools: iio: iio_utils: fix digit calculation (Matti Vaittinen)
- xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman)
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe)
- usb: bdc: change state when port disconnected (Justin Chen)
- usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen)
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen)
- ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld)
- ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google))
- ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai)
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)
- net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)
- net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)
- HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito)
- ACPI: extlog: Handle multiple records (Tony Luck)
- btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)
- r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)
- arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)
- KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)
- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)
- ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)
- x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)
- ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)
- ocfs2: clear dinode links count in case of error (Joseph Qi)
- LTS version: v4.14.297 is skipped (Saeed Mirzamohammadi)
- LTS version: v4.14.296 (Saeed Mirzamohammadi)
- thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)
- inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet)
- efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)
- md: Replace snprin