xen-kernel: fix build with clang 6 and apply pending XSA patches

This includes a band-aid for running 64bit PV guests without
compromising the whole system.

Commit the makefile diff left behind in r459786.

MFH: 2018Q1
Sponsored by: Citrix Systems R&D