CVE-2026-115231 User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that th...