drm/panthor: reject firmware sections with oversized data (CVE-2026-74452) | HOL Guard CVE