CVE-2026-23347 can: usb: f81604: correctly anchor the urb in the read bulk callback