CVE-2026-23398 icmp: fix NULL pointer dereference in icmp_tag_validation()