phonet: pep: fix use-after-free in pep_get_sb()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-68144 · Microsoft / collected KEV context

cve-program · CVE-2026-68144

• https://git.kernel.org/stable/c/c4a52cb4da8d57d060b1d52085d25147a238dac2
• https://git.kernel.org/stable/c/df198743859fefba2f824115f8151dd62d7ad6d8
• https://git.kernel.org/stable/c/1d81e19fc57a5ee55b4497d01bc0510d76fb9578
• https://git.kernel.org/stable/c/8d931a75a38b9bb584a4071f5ebbd52755fc35ee
• https://git.kernel.org/stable/c/17f78c0c0d41d738ee236eb6e841e39395188054
• https://git.kernel.org/stable/c/a48a889b60f73edb0399a8b08284a2ab0bd0295f
• https://git.kernel.org/stable/c/25e3641beb51333bfbb155af2fd2573a61113af2
• https://git.kernel.org/stable/c/0f71f852a96af9685858ce59fda34ecbf85c283d

No related operational record is retained in the current change model.