CVE-2025-38497 usb: gadget: configfs: Fix OOB read on empty string write