cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() (CVE-2026-74275) | HOL Guard CVE