CVE-2026-23317 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions