CVE-2026-115653 Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without checking that pointer against the thread's stack. A user-mod...