CVE-2026-23324 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback