eventpoll: don't decrement ep refcount while still holding the ep mutex

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-38349 · Microsoft / collected KEV context

cve-program · CVE-2025-38349

• https://git.kernel.org/stable/c/263f5de8302a6f2f136d392e5d3f8b1edf922857
• https://git.kernel.org/stable/c/b0821ec902d39062356cb644c16e17a705d1c9f5
• https://git.kernel.org/stable/c/521e9ff0b67c66a17d6f9593dfccafaa984aae4c
• https://git.kernel.org/stable/c/6dee745bd0aec9d399df674256e7b1ecdb615444
• https://git.kernel.org/stable/c/605c18698ecfa99165f36b7f59d3ed503e169814
• https://git.kernel.org/stable/c/8c2e52ebbe885c7eeaabd3b7ddcdc1246fc400d2
• https://project-zero.issues.chromium.org/issues/430541637

No related operational record is retained in the current change model.