ice: always check VF VSI pointer values (CVE-2022-49516) | HOL Guard CVE