kernel: Fix potential refcount leak in su check