Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.533.3]
- net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)
- sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185208]
- IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143229]
- sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [Orabug: 35181559] {CVE-2023-1077}

[4.14.35-2047.533.2]
- LTS version: 4.14.334 (Yifei Liu)
- powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)
- ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))
- team: Fix use-after-free when an option instance allocation fails (Florent Revest)
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)
- HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)
- asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
- HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)
- HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)
- platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)
- blk-throttle: fix lockdep warning of 'cgroup_mutex or RCU read lock required!' (Ming Lei)
- appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)
- sign-file: Fix incorrect return values check (Yusong Gao)
- net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)
- net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)
- atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)
- atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)
- atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)
- qca_spi: Fix reset behavior (Stefan Wahren)
- qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)
- qca_debug: Prevent crash on TX ring changes (Stefan Wahren)
- LTS version: 4.14.333 (Yifei Liu)
- drop_monitor: Require 'CAP_SYS_ADMIN' when joining 'events' group (Ido Schimmel)
- psample: Require 'CAP_NET_ADMIN' when joining 'packets' group (Ido Schimmel)
- genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)
- netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)
- nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)
- KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)
- serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)
- serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)
- parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)
- packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)
- tracing: Fix a possible race when disabling buffered events (Petr Pavlu)
- tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)
- tracing: Always update snapshot buffer size (Steven Rostedt (Google))
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)
- ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)
- tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)
- hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)
- RDMA/bnxt_re: Correct module description string (Kalesh AP)
- tcp: do not accept ACK of bytes we never sent (Eric Dumazet)
- net: hns: fix fake link up on xge port (Yonglong Liu)
- drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)
- tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)
- tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)
- LTS version: 4.14.332 (Yifei Liu)
- driver core: Release all resources during unbind before updating device links (Saravana Kannan)
- net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)
- ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)
- btrfs: send: ensure send_fd is writable (Jann Horn)
- btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)
- powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)
- dm verity: don't perform FEC for failed readahead IO (Wu Bo)
- dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)
- firewire: core: fix possible memory leak in create_units() (Yang Yingliang)
- pinctrl: avoid reload of p state in list iteration (Maria Yu)
- usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)
- USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)
- USB: serial: option: fix FM101R-GL defines (Puliang Lu)
- USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)
- bcache: prevent potential division by zero error (Rand Deeb)
- bcache: check return value from btree_node_alloc_replacement() (Coly Li)
- USB: serial: option: add Luat Air72*U series products (Asuna Yang)
- s390/dasd: protect device queue against concurrent access (Jan Hoppner)
- mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)
- net: axienet: Fix check for partial TX checksum (Samuel Holland)
- amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)
- amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)
- arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)
- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)
- ip