wordexp with WRDE_APPEND can return or use invalid memory (CVE-2026-6368) | HOL Guard CVE