CVE-2024-26757 md: Don’t ignore read-only array in md_check_recovery()