SUNRPC: harden gss_unwrap_resp_priv length checks

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-89541 · Microsoft / collected KEV context

cve-program · CVE-2026-89541

• https://git.kernel.org/stable/c/3691c4b3488d8ca046b9941e5be30c626dbbbb50
• https://git.kernel.org/stable/c/85fa6b12e8f439739ac36ef2aad925f37c8b976a
• https://git.kernel.org/stable/c/401f6a5b338d05bb1069ad814d9f77e3c367854f
• https://git.kernel.org/stable/c/81fd7654a8429718adfcb2a7e03496077f547ed0
• https://git.kernel.org/stable/c/89a15a50f84d32d4b99db86f957427fcbe20a99a
• https://git.kernel.org/stable/c/ebcbd2523a8524c3d24e111cdbed8e271d910269
• https://git.kernel.org/stable/c/d395c30d570ca6168f0297b191709927d1258273
• https://git.kernel.org/stable/c/87831b92112c81db251d46756d65daa4f91af6a2

No related operational record is retained in the current change model.