CVE-2026-64111 lsm: hold cred_... Note