wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-38643 · Microsoft / collected KEV context

cve-program · CVE-2025-38643

• https://git.kernel.org/stable/c/defe9ce121160788547e8e6ec4438ad8a14f40dd
• https://git.kernel.org/stable/c/b3d24038eb775f2f7a1dfef58d8e1dc444a12820
• https://git.kernel.org/stable/c/4a63523d3541eef4cf504a9682e6fbe94ffe79a6
• https://git.kernel.org/stable/c/7022df2248c08c6f75a01714163ac902333bf3db
• https://git.kernel.org/stable/c/dbce810607726408f889d3358f4780fd1436861e
• https://git.kernel.org/stable/c/2c5dee15239f3f3e31aa5c8808f18996c039e2c1

No related operational record is retained in the current change model.