commit 18c96b64c76008d6e972e90daca09c44c938b4bd
author Flavio Ceolin <flavio.ceolin@intel.com> Sun Feb 18 21:58:39 2024 -0800
committer Henrik Brix Andersen <henrik@brixandersen.dk> Wed Feb 21 16:12:26 2024 +0100
tree 3434f22d20089ac45b66d4776be3c30d71394269
parent 53f527cc2dc322302a11e2a524126e62a4dc6834

doc: security: cve-2023-6881 left embargo

Disclose information about cve-2023-6881.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>

doc/security/vulnerabilities.rst

diff --git a/doc/security/vulnerabilities.rst b/doc/security/vulnerabilities.rst
index 6cbb0b6..d61f6e3 100644
--- a/doc/security/vulnerabilities.rst
+++ b/doc/security/vulnerabilities.rst
@@ -1652,6 +1652,19 @@
 - `PR 66584 fix for 3.5
   <https://github.com/zephyrproject-rtos/zephyr/pull/66584>`_
 
+CVE-2023-6881
+-------------
+
+Potential buffer overflow vulnerability in Zephyr fuse file system.
+
+- `Zephyr project bug tracker GHSA-mh67-4h3q-p437
+  <https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mh67-4h3q-p437>`_
+
+This has been fixed in main for v3.6.0
+
+- `PR 66592 fix for main
+  <https://github.com/zephyrproject-rtos/zephyr/pull/66592>`_
+
 CVE-2024-1638
 -------------