nbd: restrict sockets to TCP and UDP (CVE-2025-40080) | HOL Guard CVE