smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382) | HOL Guard CVE