CVE-2025-40286 smb/server: fix possible memory leak in smb2_read()