Red Hat Security Advisory: kernel-rt security and bug fix update

CVE-2022-0480 — kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion CVE-2022-3545 — kernel: nfp: use-after-free in area_cache_get() CVE-2022-38096 — kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query CVE-2022-40982 — hw: Intel: Gather Data Sampling (GDS) side channel vulnerability CVE-2023-1192 — kernel: use-after-free in smb2_is_status_io_timeout() CVE-2023-2163 — kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe CVE-2023-2166 — kernel: NULL pointer dereference in can_rcv_filter CVE-2023-2176 — kernel: Slab-out-of-bound read in compare_netdev_and_ip CVE-2023-3268 — kernel: out-of-bounds access in relay_file_read CVE-2023-3390 — kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests CVE-2023-3609 — kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails CVE-2023-4459 — kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() CVE-2023-4622 — kernel: use after free in unix_stream_sendpage CVE-2023-5717 — kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list CVE-2023-6546 — kernel: GSM multiplexing race condition leads to privilege escalation CVE-2023-6932 — kernel: use-after-free in IPv4 IGMP CVE-2023-7192 — kernel: refcount leak in ctnetlink_create_conntrack() CVE-2023-38409 — kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment CVE-2023-40283 — kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c CVE-2024-0646 — kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination