x86/kexec: add a sanity check on previous kernel's ima kexec buffer (CVE-2026-43240) | HOL Guard CVE