ntfs: add bounds check before accessing EA entries (CVE-2026-72208) | HOL Guard CVE