thermal/of: Fix reference leak in thermal_of_cm_lookup() (CVE-2026-45925) | HOL Guard CVE