[El-errata] ELBA-2024-12479 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2024-12479

http://linux.oracle.com/errata/ELBA-2024-12479.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.14.35-2047.538.5.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.538.5.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.538.5.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.538.5.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.538.5.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.538.5.el7uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.14.35-2047.538.5.el7uek.src.rpm



Description of changes:

[4.14.35-2047.538.5.el7uek]
- crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek)  [Orabug: 36681826]

[4.14.35-2047.538.4.el7uek]
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) 
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei) 
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) 
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)

[4.14.35-2047.538.3.el7uek]
- uek-rpm: disable --strict-build-id on mips64 (Stephen Brennan)  [Orabug: 36717400]
- LTS version: v4.14.348 (Yifei Liu) 
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa) 
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson) 
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet) 
- dm: limit the number of targets and parameter size area (Mikulas Patocka) 
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli) 
- LTS version: v4.14.347 (Yifei Liu) 
- rds: Fix build regression. (David S. Miller) 
- RDS: IB: Use DEFINE_PER_CPU_SHARED_ALIGNED for rds_ib_stats (Nathan Chancellor) 
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) 
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) 
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) 
- dyndbg: fix old BUG_ON in >control parser (Jim Cromie) 
- tipc: fix UAF in error path (Paolo Abeni) 
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff) 
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard) 
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) 
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj) 
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) 
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) 
- net/ipv6: Refactor fib6_rule_action (David Ahern) 
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau) 
- net: bridge: use DEV_STATS_INC() (Eric Dumazet) 
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) 
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) 
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) 
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) 
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) 
- tcp: remove redundant check on tskb (Colin Ian King) 
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang) 
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt) 
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- 9p: explicitly deny setlease attempts (Jeff Layton) 
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt) 
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) 
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz) 
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi) 
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu) 
- tools/power turbostat: Fix added raw MSR output (Doug Smythies) 
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) 
- ata: sata_gemini: Check clk_enable() result (Chen Ni) 
- net: bcmgenet: Reset RBUF on first open (Phil Elwell) 
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai) 
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) 
- net: mark racy access on sk->sk_rcvbuf (linke li) 
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson) 
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee) 
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) 
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau) 
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún) 
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (Uwe Kleine-König) 
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn) 
- net l2tp: drop flow hash on forward (David Bauer) 
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) 
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh) 
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) 
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann) 
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) 
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu) 
- ethernet: add a helper for assigning port addresses (Jakub Kicinski) 
- net: create netdev->dev_addr assignment helpers (Jakub Kicinski) 
- net: slightly optimize eth_type_trans (Li RongQing) 
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) 
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul) 
- dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee) 
- LTS version: v4.14.346 (Yifei Liu) 
- Simplify major/minor non-dynamic logic (Mauro Carvalho Chehab) 
- net: fix unused variable warning in do_tcp_setsockopt() (Harshit Mogalapalli) 
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap) 
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) 
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) 
- i2c: add param sanity check to i2c_transfer() (Ard Biesheuvel) 
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko) 
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann) 
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin) 
- net: b44: set pause params only when interface is up (Peter Münster) 
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) 
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara) 
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) 
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor) 
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson) 
- tracing: Show size of requested perf buffer (Robin H. Johnson) 
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) 
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) 
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) 
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) 
- serial: core: Provide port lock wrappers (Thomas Gleixner) 
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) 
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno) 
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) 
- net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet) 
- NFC: trf7970a: disable all regulators on removal (Paul Geurts) 
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel) 
- vxlan: drop packets from invalid src-address (David Bauer) 
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin) 
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz) 
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara) 
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) 
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) 
- speakup: Avoid crash on very long word (Samuel Thibault) 
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) 
- Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman) 
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas) 
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang) 
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng) 
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant) 
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo) 
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang) 
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) 
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) 
- drm: nv04: Fix out of bounds access (Mikhail Kobuk) 
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen) 
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) 
- netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso) 
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) 
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu) 
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap) 
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz) 
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) 
- tracing: hide unused ftrace_event_id_fops (Arnd Bergmann) 
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) 
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) 
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann) 
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) 
- nouveau: fix function cast warning (Arnd Bergmann) 
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) 
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) 
- LTS version: v4.14.345 (Yifei Liu) 
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian) 
- Revert "net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()" (Vegard Nossum) 
- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) 
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) 
- Revert "ext4: fix to check return value of freeze_bdev() in ext4_shutdown()" (Vegard Nossum) 
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev) 
- Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz) 
- x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) 
- virtio: reenable config if freezing device failed (David Hildenbrand) 
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) 
- fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) 
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov) 
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King) 
- tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan) 
- block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) 
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo) 
- media: sta2x11: fix irq handler cast (Arnd Bergmann) 
- isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie) 
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) 
- sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa) 
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan) 
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) 
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) 
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba) 
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) 
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda) 
- arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker) 
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) 
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov) 
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana) 
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann) 
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann) 
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee) 
- init: open /initrd.image with O_LARGEFILE (John Sperbeck) 
- staging: vc04_services: fix information leak in create_component() (Dan Carpenter) 
- staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann) 
- staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson) 
- staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson) 
- staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson) 
- ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) 
- selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski) 
- net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) 
- net: stmmac: fix rx queue priority assignment (Piotr Wejman) 
- net: stmmac: Fix issues when number of Queues >= 4 (Jose Abreu) 
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka) 
- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) 
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera) 
- Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang) 
- tcp: properly terminate timers for kernel sockets (Eric Dumazet) 
- mptcp: add sk_stop_timer_sync helper (Geliang Tang) 
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) 
- USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) 
- scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum) 
- scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) 
- usb: udc: remove warning when queue disabled ep (yuan linyu) 
- usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan) 
- usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan) 
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor) 
- efivarfs: Request at most 512 bytes for variable names (Tim Schumacher) 
- perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong) 
- loop: Call loop_config_discard() only after new config is applied (Martijn Coenen) 
- Revert "loop: Check for overflow while configuring loop" (Genjian Zhang) 
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues) 
- btrfs: add define for oldest generation (Anand Jain) 
- printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness) 
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) 
- ALSA: aica: Fix a long-time build breakage (Takashi Iwai) 
- ALSA: sh: aica: Convert timers to use timer_setup() (Kees Cook) 
- usb: cdc-wdm: close race between read and workqueue (Oliver Neukum) 
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa) 
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov) 
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) 
- mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan) 
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) 
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun) 
- usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman) 
- usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) 
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) 
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang) 
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor) 
- netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso) 
- netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) 
- comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott) 
- nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) 
- nilfs2: use a more common logging style (Joe Perches) 
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) 
- memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang) 
- drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula) 
- drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula) 
- s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) 
- soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) 
- soc: fsl: qbman: Add CGR update function (Sean Anderson) 
- soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson) 
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) 
- vfio/platform: Disable virqfds on cleanup (Alex Williamson) 
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor) 
- speakup: Fix 8bit characters from direct synth (Samuel Thibault) 
- hwmon: (amc6821) add of_match table (Josua Mayer) 
- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai) 
- PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) 
- PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König) 
- fuse: don't unhash root (Miklos Szeredi) 
- mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang) 
- PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li) 
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri) 
- USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs) 
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström) 
- USB: serial: add device ID for VeriFone adapter (Cameron Williams) 
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher) 
- powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman) 
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) 
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) 
- PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah) 
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck) 
- parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck) 
- parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck) 
- parisc: Fix ip_fast_csum (Guenter Roeck) 
- parisc: Do not hardcode registers in checksum functions (Helge Deller) 
- ubi: correct the calculation of fastmap size (Zhang Yi) 
- ubi: Check for too small LEB size in VTBL code (Richard Weinberger) 
- ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle)) 
- fat: fix uninitialized field in nostale filehandles (Jan Kara) 
- crypto: qat - resolve race condition during AER recovery (Damian Muszynski) 
- crypto: qat - fix double free during reset (Svyatoslav Pankratov) 
- sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap) 
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) 
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han) 
- arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović) 
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel) 
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu) 
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu) 
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) 
- x86/bugs: Use sysfs_emit() (Borislav Petkov) 
- LTS version: v4.14.344 (Yifei Liu) 
- binder: signal epoll threads of self-work (Carlos Llamas) 
- ANDROID: binder: Add thread->process_todo flag. (Martijn Coenen) 
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun) 
- scsi: bnx2fc: Remove set but not used variable 'oxid' (YueHaibing) 
- net: check dev->gso_max_size in gso_features_check() (Eric Dumazet) 
- driver: staging: count ashmem_range into SLAB_RECLAIMBLE (Zhaoyang Huang) 
- net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit) 
- staging: android: ashmem: Remove use of unlikely() (Alistair Strachan) 
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li) 
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) 
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman) 
- ALSA: hda/realtek - ALC897 headset MIC no sound (Kailang Yang) 
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (Kailang Yang) 
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang) 
- ALSA: hda/realtek - The front Mic on a HP machine doesn't work (Jeremy Szu) 
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (Jian-Hong Pan) 
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (Jian-Hong Pan) 
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (Kailang Yang) 
- ALSA: hda/realtek - More constifications (Takashi Iwai) 
- Add Acer Aspire Ethos 8951G model quirk (Sergey Bostandzhyan) 
- devcoredump: Send uevent once devcd is ready (Mukesh Ojha) 
- devcoredump : Serialize devcd_del work (Mukesh Ojha) 
- netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter) 
- netfilter: xt_owner: Add supplementary groups option (Lukasz Pawelczyk) 
- mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij) 
- mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker) 
- s390/cmma: fix detection of DAT pages (Heiko Carstens) 
- s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev) 
- ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang) 
- hfsplus: unmap the page in the "fail_page" label (Fabio M. De Francesco) 
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis) 
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (Jian-Hong Pan) 
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (Richard Sailer) 
- ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 (Jeremy Soller) 
- ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (Jeremy Soller) 
- ALSA: hda/realtek - Add support for ALC1220 (Peisen) 
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang) 
- pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König) 
- pwm: sti: Avoid conditional gotos (Thierry Reding) 
- tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen) 
- tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi) 
- tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean) 
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET) 
- ledtrig-cpu: Limit to 8 CPUs (Pavel Machek) 
- leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König) 
- leds: pwm: convert to atomic PWM API (Uwe Kleine-König) 
- leds: pwm: simplify if condition (Uwe Kleine-König) 
- regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET) 
- regmap: Allow missing device in regmap_name_read_file() (David Lechner) 
- tcp_metrics: add missing barriers on delete (Eric Dumazet) 
- tcp: batch tcp_net_metrics_exit (Eric Dumazet) 
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell) 
- tcp: Namespace-ify sysctl_tcp_early_retrans (Eric Dumazet) 
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) 
- ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) 
- libata: make ata_port_type const (Bhumika Goyal) 
- libata: Add new med_power_with_dipm link_power_management_policy setting (Hans de Goede) 
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) 
- ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (Jaroslav Kysela) 
- ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist (Hans de Goede) 
- ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) 
- ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) 
- ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) 
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar) 
- usb: typec: tcpci: clear the fault status bit (Marco Felsch) 
- usb: typec: add fwnode to tcpc (Li Jun) 
- staging: typec: fix endianness mismatch identified by sparse (Gabriel L. Somlo) 
- staging: typec: tcpm: Document data structures (Guenter Roeck) 
- serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) 
- sc16is7xx: Set iobase to device index (Daniel Mack) 
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) 
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) 
- drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun) 
- ARM: dts: BCM53573: Drop nonexistent #usb-cells (Rafał Miłecki) 
- ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name (Serge Semin) 
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) 
- ath9k: use irqsave() in USB's complete callback (Sebastian Andrzej Siewior) 
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) 
- mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET) 
- mwifiex: drop 'set_consistent_dma_mask' log message (Brian Norris) 
- bonding: fix macvlan over alb bond support (Hangbin Liu) 
- net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) 
- fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) 
- fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) 
- fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) 
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) 
- Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Alexander Stein) 
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) 
- MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) 
- fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) 
- fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) 
- fs: dlm: change plock interrupted message to debug again (Alexander Aring) 
- fs: dlm: add pid to debug log (Alexander Aring) 
- dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) 
- dlm: improve plock logging if interrupted (Alexander Aring) 
- nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) 
- nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) 
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundebøll) 
- mmc: meson-gx: remove useless lock (Jerome Brunet) 
- PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) 
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) 
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) 
- scsi: zfcp: workqueue: set description for port work items with their WWPN as context (Steffen Maier) 
- btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) 
- btrfs: simplify IS_ERR/PTR_ERR checks (Al Viro) 
- fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) 
- dlm: rearrange async condition return (Alexander Aring) 
- dlm: cleanup plock_op vs plock_xop (Alexander Aring) 
- ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) 
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) 
- tcp: annotate data-races around tp->linger2 (Eric Dumazet) 
- net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) 
- ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) 
- ceph: define argument structure for handle_cap_grant (Yan, Zheng) 
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) 
- net: bcmgenet: Avoid calling platform_device_put() twice in bcmgenet_mii_exit() (Wei Yongjun) 
- net: tcp_input: Neaten DBGUNDO (Joe Perches) 
- i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) 
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) 
- i2c: xiic: Fix broken locking on tx_msg (Marek Vasut) 
- i2c: xiic: Change code alignment to 1 space only (Jaakko Laine) 
- i2c: xiic: Add timeout to the rx fifo wait loop (Shubhrajyoti Datta) 
- i2c: xiic: Fix kerneldoc warnings (Shubhrajyoti Datta) 
- hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) 
- hwrng: virtio - always add a pending request (Laurent Vivier) 
- hwrng: virtio - don't waste entropy (Laurent Vivier) 
- hwrng: virtio - don't wait on cleanup (Laurent Vivier) 
- hwrng: virtio - add an internal buffer (Laurent Vivier) 
- nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) 
- nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) 
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) 
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) 
- Documentation: fix little inconsistencies (Pavel Machek) 
- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni) 
- net/rose: fix races in rose_kill_by_device() (Eric Dumazet) 
- reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven) 
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon) 
- PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König) 
- PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König) 
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde) 
- can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde) 
- r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac) 
- xen-netback: use default TX queue size for vifs (Roger Pau Monne) 
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) 
- arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller (Konrad Dybcio) 
- regmap: Account for register length in SMBus I/O limits (Mark Brown) 
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) 
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) 
- PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) 
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) 
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) 
- usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter) 
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) 
- btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik) 
- pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré) 
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian) 
- arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno) 
- IB/isert: Fix unaligned immediate-data handling (Sagi Grimberg) 
- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller) 
- smb3: fix touch -h of symlink (Steve French) 
- MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen) 
- cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova) 
- macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov) 
- ppp: limit MRU to 64K (Willem de Bruijn) 
- ptp: annotate data-race around q->head and q->tail (Eric Dumazet) 
- xen/events: fix delayed eoi list handling (Juergen Gross) 
- tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida) 
- tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida) 
- iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski) 
- selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel) 
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch) 
- block: fix signed int overflow in Amiga partition support (Michael Schmitz) 
- iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) 
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) 
- btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) 
- pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) 
- ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) 
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) 
- ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)

[4.14.35-2047.538.2.el7uek]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655470]
- slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655470]

[4.14.35-2047.538.1.el7uek]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK5 (Jianfeng Wang)  [Orabug: 36460666]
- fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google))  [Orabug: 36460666]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460666]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460666]
- arm64: ftrace: remove return_regs macros (Mark Rutland)  [Orabug: 36460666]
- function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460666]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460666]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830450]