drm/amdkfd: validate SVM ioctl nattr against buffer size (CVE-2026-46197) | HOL Guard CVE