diff --git a/doc/security/vulnerabilities.rst b/doc/security/vulnerabilities.rst index 68c2f7ff634..db3418e30e3 100644 --- a/doc/security/vulnerabilities.rst +++ b/doc/security/vulnerabilities.rst @@ -1908,4 +1908,21 @@ This has been fixed in main for v4.1.0 :cve:`2025-2962` ---------------- -Under embargo until 2025-06-07 +Infinite loop in dns_copy_qname + +A denial-of-service issue in the dns implementation could cause an +infinite loop. + +- `Zephyr project bug tracker GHSA-2qp5-c2vq-g2ww + `_ + +This has been fixed in main for v4.2.0 + +- `PR 87753 fix for main + `_ + +- `PR 87925 fix for 4.1 + `_ + +- `PR 87949 fix for 3.7 + `_