[4.18.0-305.12.1.el8_4.OL8] - Update Oracle Linux certificates - Disable signing for aarch64 - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 15-11.0.5.el8 [4.18.0-305.12.1.el8_4] - Revert nvme-pci: remove last_sq_tail [1965415 1921591] - tc-testing: add test for ct DNAT tuple collision [1982494 1964578] - tc-testing: add support for sending various scapy packets [1982494 1964578] - tc-testing: fix list handling [1982494 1964578] - net/sched: act_ct: handle DNAT tuple collision [1982494 1964578] - mm/memcg: Relocate tcpmem to below memory in struct mem_cgroup [1980314 1959772] - mm/memcg: optimize user context object stock access [1980314 1959772] - mm/memcg: improve refill_obj_stock performance [1980314 1959772] - mm/memcg: cache vmstat data in percpu memcg_stock_pcp [1980314 1959772] - mm/memcg: move mod_objcg_state to memcontrol.c [1980314 1959772] - mm: memcontrol: use obj_cgroup APIs to charge kmem pages [1980314 1959772] - mm: memcontrol: change ug-dummy_page only if memcg changed [1980314 1959772] - mm: memcontrol: directly access page-memcg_data in mm/page_alloc.c [1980314 1959772] - mm: memcontrol: introduce obj_cgroup_{un}charge_pages [1980314 1959772] - mm: memcontrol: slab: fix obtain a reference to a freeing memcg [1980314 1959772] - mm: move lruvec stats update functions to vmstat.h [1980314 1959772] - mm: memcg/slab: rename *_lruvec_slab_state to *_lruvec_kmem_state [1980314 1959772] - mm: Convert page kmemcg type to a page memcg flag [1980314 1959772] - mm: Introduce page memcg flags [1980314 1959772] - mm: memcontrol/slab: Use helpers to access slab page"s memcg_data [1980314 1959772] - mm: memcontrol: Use helpers to read page"s memcg data [1980314 1959772] - mm/page_alloc.c: extract check_[new|free]_page_bad common part to page_bad_reason [1980314 1959772] - mm/page_alloc.c: rename free_pages_check to check_free_page [1980314 1959772] - mm/page_alloc.c: rename free_pages_check_bad to check_free_page_bad [1980314 1959772] - mm/page_alloc.c: bad_flags is not necessary for bad_page [1980314 1959772] - mm/page_alloc.c: bad_[reason|flags] is not necessary when PageHWPoison [1980314 1959772] [4.18.0-305.11.1.el8_4] - SUNRPC: Handle major timeout in xprt_adjust_timeout [1980613 1979070] - net/mlx5e: Disable TLS device offload in kdump mode [1969909 1946647] - net/mlx5e: Disable TX MPWQE in kdump mode [1969909 1946647] - drm/i915: Add an encoder hook to sanitize its state during init/resume [1981250 1961122] - netfilter: x_tables: fix compat match/target pad out-of-bound write [1980500 1980501] {CVE-2021-22555} - Bluetooth: btusb: Fix the autosuspend enable and disable [1972564 1927375] - cifs: handle empty list of targets in cifs_reconnect [1973637 1952263] - tick/nohz: Update idle_exittime on actual idle exit [1978710 1962632] - tick/nohz: Remove superflous check for CONFIG_VIRT_CPU_ACCOUNTING_NATIVE [1978710 1962632] - tick/nohz: Conditionally restart tick on idle exit [1978710 1962632] - can: bcm: delay release of struct bcm_op after synchronize_rcu [1975058 1975059] - redhat/configs: Re-enable dptf_power module [1968381 1962349] - KVM: do not allow mapping valid but non-reference-counted pages [1975514 1975515] {CVE-2021-22543} - seq_file: Disallow extremely large seq buffer allocations [1975181 1975182] {CVE-2021-33909}