security: docs: Add CVE-2021-3966

Add information about CVE-2021-3966 Signed-off-by: Flavio Ceolin <[email protected]>
MaJerle · Feb 18, 2022 · e14d07a · e14d07a
1 parent 35ec3c9
commit e14d07a
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/doc/security/vulnerabilities.rst b/doc/security/vulnerabilities.rst
@@ -1140,3 +1140,19 @@ This has been fixed in main for v3.0.0
 
 - `PR 39725 fix for main
   <https://github.com/zephyrproject-rtos/zephyr/pull/39725>`_
+
+CVE-2021-3966
+-------------
+
+Usb bluetooth device ACL read cb buffer overflow
+
+This has been fixed in main for v3.0.0
+
+- `Zephyr project bug tracker GHSA-hfxq-3w6x-fv2m
+  <https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hfxq-3w6x-fv2m>`_
+
+- `PR 42093 fix for main
+  <https://github.com/zephyrproject-rtos/zephyr/pull/42093>`_
+
+- `PR 42167 fix for v2.7.0
+  <https://github.com/zephyrproject-rtos/zephyr/pull/42167>`_