drm/vmwgfx: reject DX_BIND_QUERY without a DX context (CVE-2026-74445) | HOL Guard CVE