Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.523.4.1]
- mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [Orabug: 35164196]

[4.14.35-2047.523.4]
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987235]
- rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 34987235]
- net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon) [Orabug: 25962452] [Orabug: 31712036]

[4.14.35-2047.523.3]
- driver/soc/pensando: cap_pcie: refactor pciep_regrd32 (David Clear) [Orabug: 35089515]
- mtd: spi-nor: Add support for Winbond w25q02nw flash. (David Clear) [Orabug: 35089515]
- drivers/i2c: Lattice I2C driver update (David Clear) [Orabug: 35089515]
- drivers/soc/pensando: Adding Elba sbus driver (David Clear) [Orabug: 35089515]
- Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 35080511]
- scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040145]

[4.14.35-2047.523.2]
- RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060577]
- xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35040849]

[4.14.35-2047.523.1]
- x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34966703]
- xfs: make COW fork unwritten extent conversions more robust (Christoph Hellwig) [Orabug: 34390903]
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil) [Orabug: 34242965]
- scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) [Orabug: 34242965]
- LTS version: v4.14.304 (Saeed Mirzamohammadi)
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)
- gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)
- serial: atmel: fix incorrect baudrate setup (Tobias Schramm)
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen)
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski)
- usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)
- usb: host: ehci-fsl: Fix module alias (Alexander Stein)
- USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)
- usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)
- USB: serial: option: add Quectel EM05CN modem (Duke Xin)
- USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin)
- USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)
- USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin)
- USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin)
- prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)
- usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)
- xhci-pci: set the dma max_seg_size (Ricardo Ribalda)
- nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)
- f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim)
- RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)
- pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)
- LTS version: v4.14.303 (Saeed Mirzamohammadi)
- Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth)
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang)
- hvc/xen: lock console list traversal (Roger Pau Monne)
- regulator: da9211: Use irq handler when ready (Ricardo Ribalda)
- EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra)
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005830] {CVE-2023-0394}
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede)
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne)
- net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)
- perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)
- docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)
- net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005793] {CVE-2022-47929}
- ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das)
- driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)
- parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)
- hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)
- x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)
- udf: Fix extension of the last extent in the file (Jan Kara)
- caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)
- usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)
- net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983615] {CVE-2023-23455}
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)
- net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)
- nfc: Fix potential resource leaks (Miaoqian Lin)
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable