CVE-2025-38248 bridge: mcast: Fix use-after-free during router port configuration