GHSA-w8rw-fqgj-9r49: Module thread can get priority higer than txm_module_instance_maximum_priority

In threadx modules, there is protection upon thread creation checking if priority and preemption priority is not higher than txm_module_instance_maximum_priority, but in thread_priority_change and thread_preemption_change there is no check for it

there is an option to control the maximum thread priority and preemption priority.

This option controlled by: https://github.com/eclipse-threadx/threadx/blob/7ad78c40e9702917264a9b722890110fdb909ebc/common_modules/module_manager/src/txm_module_manager_maximum_module_priority_set.c#L68 This checked when creating all module threads: https://github.com/eclipse-threadx/threadx/blob/7ad78c40e9702917264a9b722890110fdb909ebc/common_modules/module_manager/src/txm_module_manager_start.c#L123-L124 https://github.com/eclipse-threadx/threadx/blob/7ad78c40e9702917264a9b722890110fdb909ebc/common_modules/module_manager/inc/txm_module_manager_dispatch.h#L2030-L2033 But not checked when thread request to change its/other thread priority.

at: https://github.com/eclipse-threadx/threadx/blob/7ad78c40e9702917264a9b722890110fdb909ebc/common_modules/module_manager/inc/txm_module_manager_dispatch.h#L2387 https://github.com/eclipse-threadx/threadx/blob/7ad78c40e9702917264a9b722890110fdb909ebc/common_modules/module_manager/inc/txm_module_manager_dispatch.h#L2416 It will be checked if the requested thread is module thread and if it is to be checked against his module txm_module_instance_maximum_priority value

thread can have higher priority than allowed and potentially create a denial of service