CVE-2026-23393 bridge: cfm: Fix race condition in peer_mep deletion