can: softing: fw_parse(): validate firmware record spans

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-80706 · Microsoft / collected KEV context

cve-program · CVE-2026-80706

• https://git.kernel.org/stable/c/f6d9a6a9512430b395a1940d7b216394fd02d30b
• https://git.kernel.org/stable/c/84c850b08fc0d671c245144b619683129b55690a
• https://git.kernel.org/stable/c/d0eac0ea7cf493e787fd7b4a556e43ef03cb4b50
• https://git.kernel.org/stable/c/ae588e5b9cc268de1aabf30f939f0870717ca164
• https://git.kernel.org/stable/c/ad331e26fd213a19fee0de18cdacd67b7ff5b478
• https://git.kernel.org/stable/c/2ee477e541a6d5e434d6a4041c6b677ab42e1d82
• https://git.kernel.org/stable/c/808ed899dcf8bdef66894fda5eb7ee4bb0eb8dc1
• https://git.kernel.org/stable/c/856d6cb04e5407523566b075841dcd6423757d1c

No related operational record is retained in the current change model.