CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size