Out-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem image (CVE-2026-10645) | HOL Guard CVE