CVE-2026-15890

CVE-2026-15890 affects the Zephyr RTOS PSA Internal Trusted Storage (ITS) transform module. The default AEAD nonce provider (secure_storage_its_transform_aead_get_nonce) stores its nonce counter in unsynchronized function-local static variables. Two concurrent threads writing the same entry UID c...