CVE-2025-40240 sctp: avoid NULL dereference when chunk data buffer is missing