[4.14.35-2047.535.2.1.el7uek] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36467681] {CVE-2024-1086} [4.14.35-2047.535.2.el7uek] - Fix null ptr in rds_tcp_recv_path [Orabug: 33499812] - LTS version: v4.14.338 - crypto: scompress - initialize per-CPU variables on each CPU - Revert quot;NFSD: Fix possible sleep during nfsd4_release_lockownerquot; - i2c: s3c24xx: fix transferring more than one message in polling mode - i2c: s3c24xx: fix read transfers in polling mode - kdb: Fix a potential buffer overflow in kdb_local - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ - ipvs: avoid stat macros calls from preemptible context - net: ravb: Fix dma_addr_t truncation in error case - serial: imx: Correct clock error message in function probe - apparmor: avoid crash when parsed profile name is empty - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup - HID: wacom: Correct behavior when processing some confidence == false touches - wifi: mwifiex: configure BSSID consistently when starting AP - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code - fbdev: flush deferred work in fb_deferred_io_fsync - ALSA: oxygen: Fix right channel of capture volume mixer - usb: mon: Fix atomicity violation in mon_bin_vma_fault - usb: chipidea: wait controller resume finished for wakeup irq - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug - binder: fix unused alloc-gt;free_async_space - binder: fix race between mmput and do_exit - Input: atkbd - use ab83 as id when skipping the getid command - binder: fix async space check for 0-sized buffers - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling - watchdog: set cdev owner before adding - gpu/drm/radeon: fix two memleaks in radeon_vm_init - drivers/amd/pm: fix a use-after-free in kv_parse_power_table - drm/amd/pm: fix a double-free in si_dpm_init - media: dvbdev: drop refcount on error path in dvb_device_open - media: cx231xx: fix a memleak in cx231xx_init_isoc - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table - drm/radeon/dpm: fix a memleak in sumo_parse_power_table - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init - drm/drv: propagate errors from drm_modeset_register_all - drm/msm/mdp4: flush vblank event on disable - ASoC: cs35l34: Fix GPIO name and drop legacy include - ASoC: cs35l33: Fix GPIO name and drop legacy include - drm/radeon: check return value of radeon_ring_lock - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg - f2fs: fix to avoid dirent corruption - drm/bridge: Fix typo in post_disable description - media: pvrusb2: fix use after free on context disconnection - RDMA/usnic: Silence uninitialized symbol smatch warnings - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim - Bluetooth: Fix bogus check for re-auth no supported with non-ssp - wifi: rtlwifi: rtl8192se: using calculate_bit_shift - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift - wifi: rtlwifi: rtl8192de: using calculate_bit_shift - rtlwifi: rtl8192de: make arrays static const, makes object smaller - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift - wifi: rtlwifi: rtl8192c: using calculate_bit_shift - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift - wifi: rtlwifi: add calculate_bit_shift - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior - rtlwifi: Use ffs in lt;foogt;_phy_calculate_bit_shift - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create - net/ncsi: Fix netlink major/minor version numbers - ncsi: internal.h: Fix a spello - wifi: libertas: stop selecting wext - bpf, lpm: Fix check prefixlen before walking trie - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT - crypto: scomp - fix req-gt;dst buffer overflow - crypto: scompress - Use per-CPU struct instead multiple variables - crypto: scompress - return proper error code for allocation failure - crypto: sahara - do not resize req-gt;src when doing hash operations - crypto: sahara - fix processing hash requests with req-gt;nbytes lt; sg-gt;length - crypto: sahara - improve error handling in sahara_sha_process - crypto: sahara - fix wait_for_completion_timeout error handling - crypto: sahara - fix ahash reqsize - crypto: virtio - Wait for tasklet to complete on device remove - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc - crypto: sahara - fix error handling in sahara_hw_descriptor_create - crypto: sahara - fix processing requests with cryptlen lt; sg-gt;length - crypto: sahara - fix ahash selftest failure - crypto: sahara - remove FLAGS_NEW_KEY logic - crypto: af_alg - Disallow multiple in-flight AIO requests - crypto: ccp - fix memleak in ccp_init_dm_workarea - crypto: virtio - Handle dataq logic with tasklet - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier - calipso: fix memory leak in netlbl_calipso_add_pass - netlabel: remove unused parameter in netlbl_netlink_auditinfo - net: netlabel: Fix kerneldoc warnings - ACPI: video: check for error while searching for backlight device parent - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response - powerpc/imc-pmu: Add a null pointer check in update_events_in_group - powerpc/powernv: Add a null pointer check in opal_event_init - selftests/powerpc: Fix error handling in FPU/VMX preemption tests - powerpc/pseries/memhp: Fix access beyond end of drmem array - powerpc/pseries/memhotplug: Quieten some DLPAR operations - powerpc/44x: select I2C for CURRITUCK - powerpc: remove redundant "default n" from Kconfig-s - powerpc: add crtsavres.o to always-y instead of extra-y - EDAC/thunderx: Fix possible out-of-bounds string access - x86/lib: Fix overflow when counting digits - coresight: etm4x: Fix width of CCITMIN field - uio: Fix use-after-free in uio_open - binder: fix comment on binder_alloc_new_buf return value - drm/crtc: fix uninitialized variable use - Input: xpad - add Razer Wolverine V2 support - ARC: fix spare error - s390/scm: fix virtual vs physical address confusion - Input: atkbd - skip ATKBD_CMD_GETID in translated mode - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI - tracing: Add size check when printing trace_marker output - tracing: Have large events show up as "[LINE TOO BIG]" instead of nothing - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc - jbd2: correct the printing of write_flags in jbd2_write_superblock - clk: rockchip: rk3128: Fix HCLK_OTG gate register - drm/exynos: fix a potential error pointer dereference - ASoC: da7219: Support low DC impedance headset - net/tg3: fix race condition in tg3_reset_task - ASoC: rt5650: add mutex to avoid the jack detection failure - ASoC: cs43130: Fix incorrect frame delay configuration - ASoC: cs43130: Fix the position of const qualifier - f2fs: explicitly null-terminate the xattr list - LTS version: v4.14.337 - ipv6: remove max_size check inline with ipv4 - ipv6: make ip6_rt_gc_expire an atomic_t - net/dst: use a smaller percpu_counter batch for dst entries accounting - net: add a route cache full diagnostic message - netfilter: nf_tables: Reject tables of unsupported family [Orabug: 36192153] {CVE-2023-6040} - fuse: nlookup missing decrement in fuse_direntplus_link - mm: fix unmap_mapping_range high bits shift bug - mm/memory-failure: check the mapcount of the precise page - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters - asix: Add check for usbnet_get_endpoints - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues - net/qla3xxx: switch from "pci_" to "dma_" API [4.14.35-2047.535.1.el7uek] - mm: avoid conflict between MADV_DOEXEC and upstream advice values [Orabug: 36334310] - net/rds: print PPID/COMM of process doing user reset on RDS connection [Orabug: 36248431]