Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.536.5]
- mmc: core: Fix switch on gp3 partition (Dominique Martinet)
- Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu)
- mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)
- Revert 'x86/mm/ident_map: Use gbpages only where full GB page should be mapped.' (Ingo Molnar)
- sched/fair: More accurate reweight_entity() (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Introduce {en,de}queue_load_avg() (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Rename {en,de}queue_entity_load_avg() (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Move enqueue migrate handling (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Change update_load_avg() arguments (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Remove se->load.weight from se->avg.load_sum (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Cure calc_cfs_shares() vs. reweight_entity() (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Add comment to calc_cfs_shares() (Peter Zijlstra) [Orabug: 36468903]
- sched/fair: Clean up calc_cfs_shares() (Peter Zijlstra) [Orabug: 36468903]
- rds/rdma: Fix congestion value for userspace consumption (Juan Garcia) [Orabug: 36264644]
- rds: Include transport protocol name in rds-info -k output (Juan Garcia) [Orabug: 36264644]

[4.14.35-2047.536.4]
- rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia) [Orabug: 36264661]
- bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju) [Orabug: 36223525]

[4.14.35-2047.536.3]
- Revert 'net/sched: Retire CBQ qdisc' (Saeed Mirzamohammadi)
- Revert 'net/sched: Retire ATM qdisc' (Saeed Mirzamohammadi)
- Revert 'net/sched: Retire dsmark qdisc' (Saeed Mirzamohammadi)

[4.14.35-2047.536.2]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36466544] {CVE-2024-1086}
- RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil) [Orabug: 36280065]
- mm: avoid heavy swap lock contention when unmapping with ktask (Anthony Yznaga) [Orabug: 36201622]
- mm: use less threads when unmapping some large VMAs (Anthony Yznaga) [Orabug: 36201622]
- LTS version: v4.14.341 (Yifei Liu)
- gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)
- cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)
- mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)
- btrfs: dev-replace: properly validate device names (David Sterba)
- wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)
- ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)
- power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)
- efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)
- Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)
- Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)
- LTS version: v4.14.340 (Yifei Liu)
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)
- PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)
- s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)
- packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)
- ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)
- nouveau: fix function cast warnings (Arnd Bergmann)
- scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)
- RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)
- RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche)
- IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)
- l2tp: pass correct message length to ip6_append_data (Tom Parkin)
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)
- dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Roman Gushchin)
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)
- virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)
- firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)
- hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)
- ahci: asm1166: correct count of reported ports (Conrad Kostecki)
- fbdev: sis: Error out if pixclock equals zero (Fullway Wang)
- fbdev: savage: Error out if pixclock equals zero (Fullway Wang)
- wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)
- wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)
- dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)
- scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)
- sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)
- nilfs2: replace WARN_ONs for invalid DAT m