nscd: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602) | HOL Guard CVE