KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache (CVE-2022-49882) | HOL Guard CVE