Cross-thread socket descriptor access via missing permission checks

Improper permissions in Zephyr RTOS v1.14.2 and v2.2.0 allow local users to read or write socket descriptors via crafted system calls. Zephyr's socket API stores descriptors without kernel-object permission tracking, so any thread that knows a descriptor number can bypass ownership checks and access the underlying socket. The flaw requires code execution as a local thread on the device and can expose or alter socket traffic and disrupt communications; it does not provide remote entry by itself.