From 14b15fcabfa19ea1930f579115c704041e772068 Mon Sep 17 00:00:00 2001
From: Ben Taylor <ben.taylor@linaro.org>
Date: Thu, 20 Aug 2026 15:04:59 +0100
Subject: [PATCH] Add fix for transform setup resource leak

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
(cherry picked from commit 0ad86e77b2e73100aa65f5148ea865a12caa87f0)
---
 library/ssl_tls13_keys.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/library/ssl_tls13_keys.c b/library/ssl_tls13_keys.c
index 865e02c2dc..cc4ed17ea0 100644
--- a/library/ssl_tls13_keys.c
+++ b/library/ssl_tls13_keys.c
@@ -1034,6 +1034,8 @@ int mbedtls_ssl_tls13_populate_transform(
                                      &transform->psa_key_dec)) != PSA_SUCCESS) {
             MBEDTLS_SSL_DEBUG_RET(
                 1, "psa_import_key", PSA_TO_MBEDTLS_ERR(status));
+            psa_destroy_key(transform->psa_key_enc);
+            transform->psa_key_enc = MBEDTLS_SVC_KEY_ID_INIT;
             return PSA_TO_MBEDTLS_ERR(status);
         }
     }