vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass) (CVE-2026-44004) | HOL Guard CVE