CVE-2026-23468 drm/amdgpu: Limit BO list entry count to prevent resource exhaustion