What is CVE-2026-12233?
CVE-2026-12233 is caused by an uninitialized mutex (k_mutex) in the PSA Protected Storage credential backend, where k_mutex_init() was never called. This can lead to concurrency issues and potential security vulnerabilities. It is recommended to update to a patched version where the mutex is properly initialized.
Azərbaycanca: CVE-2026-12233 PSA Protected Storage komponentində credential backend-in mutex (k_mutex) obyektinin düzgün inisializasiya edilməməsi ilə bağlıdır. Bu, eyni vaxtlı giriş (concurrency) problemlərinə və potensial təhlükəsizlik boşluqlarına yol aça bilər. Təsirə məruz qalan sistemlərdə k_mutex_init() çağırışının əlavə olunduğu yenilənmiş proqram təminatına keçmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-1188
FAQ1
In CVE-2026-12233, which object is improperly initialized in the PSA Protected Storage component?
This vulnerability occurs due to the improper initialization of the k_mutex (mutex) object in the credential backend of the PSA Protected Storage component. The k_mutex_init() function was never called, which can lead to concurrency issues.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.