CVE-2026-23240 tls: Fix race condition in tls_sw_cancel_work_tx()