[5.14.0-362.18.1.el9_3.OL9] - Update Oracle Linux certificates - Disable signing for aarch64 - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 = 15.3-1.0.5.el9 - Remove nmap references from kernel [Orabug: 34313944] - Remove upstream reference during boot [Orabug: 34729535] - Disable unified kernel image package build - Add Oracle Linux IMA certificates [5.14.0] - Debranding patches copied from Rocky Linux [5.14.0-362.18.1.el9_3] - nfp: fix use-after-free in area_cache_get [RHEL-19456 RHEL-19536 RHEL-6566 RHEL-7241] {CVE-2022-3545} - rtla: Fix uninitialized variable found [RHEL-18360 RHEL-10079] - rtla/timerlat: Do not stop user-space if a cpu is offline [RHEL-18360 RHEL-10079] - rtla/timerlat_aa: Fix previous IRQ delay for IRQs that happens after thread sample [RHEL-18360 RHEL-10079] - rtla/timerlat_aa: Fix negative IRQ delay [RHEL-18360 RHEL-10079] - rtla/timerlat_aa: Zero thread sum after every sample analysis [RHEL-18360 RHEL-10079] - rtla/timerlat_hist: Add timerlat user-space support [RHEL-18360 RHEL-10079] - rtla/timerlat_top: Add timerlat user-space support [RHEL-18360 RHEL-10079] - rtla/hwnoise: Reduce runtime to 75% [RHEL-18360 RHEL-10079] - rtla: Start the tracers after creating all instances [RHEL-18360 RHEL-10079] - rtla/timerlat_hist: Add auto-analysis support [RHEL-18360 RHEL-10079] - rtla/timerlat: Give timerlat auto analysis its own instance [RHEL-18360 RHEL-10079] - rtla: Automatically move rtla to a house-keeping cpu [RHEL-18360 RHEL-10079] - rtla: Change monitored_cpus from char * to cpu_set_t [RHEL-18360 RHEL-10079] - rtla: Add --house-keeping option [RHEL-18360 RHEL-10079] - rtla: Add -C cgroup support [RHEL-18360 RHEL-10079] - ata: ahci: Add Intel Alder Lake-P AHCI controller to low power chipsets list [RHEL-19394 RHEL-10941] - fbcon: set_con2fb_map needs to set con2fb_map! [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409} - fbcon: Fix error paths in set_con2fb_map [RHEL-1106 RHEL-1109 RHEL-12930 RHEL-13899] {CVE-2023-38409} - net: tun: fix bugs for oversize packet when napi frags enabled [RHEL-12495 RHEL-12496 RHEL-7186 RHEL-7264] {CVE-2023-3812} - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR [RHEL-10536 RHEL-10538 RHEL-10537 RHEL-10539] {CVE-2023-4015} - md: Put the right device in md_seq_next [RHEL-16363 RHEL-12455] - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set [RHEL-19677 RHEL-19095] {CVE-2023-6679} - dpll: Fix potential msg memleak when genlmsg_put_reply failed [RHEL-19677 RHEL-19095] {CVE-2023-6679} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb [RHEL-19003 RHEL-2717] {CVE-2023-40283} - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink [RHEL-16129 RHEL-11592] - tcp: adjust rcv_ssthresh according to sk_reserved_mem [RHEL-16129 RHEL-11592] - md: raid0: account for split bio in iostat accounting [RHEL-4082 RHEL-2718] - can: af_can: fix NULL pointer dereference in can_rcv_filter [RHEL-19465 RHEL-19526 RHEL-6428 RHEL-7052] {CVE-2023-2166}