CVE-2026-12233

CVE-2026-12233 affects the PSA Protected Storage TLS credential backend. The credential_store mutex was declared as a zero-initialized static k_mutex and never initialized, leaving its wait queue NULL. Under contention, z_pend_curr() appends to this uninitialized wait queue and dereferences a NUL...