fork: defer linking file vma until vma is fully initialized (CVE-2024-27022) | HOL Guard CVE