CVE-2025-71094 net: usb: asix: validate PHY address before use