CVE-2026-72261: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc3-control: Validate size in sndsofupdatecontrol

In sndsofupdatecontrol(), firmware-provided cdata->numelems is checked against localcdata->data->size but never against the actual allocation size. If localcdata->data->size was previously set to an inconsistent value, the memcpy could write past the allocated buffer.

Add a bounds check to ensure numelems fits within the available space in the ipccontroldata allocation before copying.