scsi: pvscsi: check command descriptor ring buffer size (CVE-2016-4952)