bus: mhi: ep: Update read pointer only after buffer is written (CVE-2025-38429) | HOL Guard CVE