CVE-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()