drm/vmwgfx: Validate vmw_surface_metadata::array_size (CVE-2026-68446) | HOL Guard CVE