TFMV-2: Add SVC caller stack pointer fetching vulnerability.

Change-Id: Ib29b43c18a37efddef00cac3bb78bfb9825cfb54
Signed-off-by: Ken Liu <Ken.Liu@arm.com>
diff --git a/docs/reference/security.rst b/docs/reference/security.rst
index 6d2cfbf..67632a9 100644
--- a/docs/reference/security.rst
+++ b/docs/reference/security.rst
@@ -46,11 +46,15 @@
 |  |TFMV-1|  | NS world may cause the CPU to perform an unexpected return      |
 |            | operation due to unsealed stacks.                               |
 +------------+-----------------------------------------------------------------+
+|  |TFMV-2|  | Invoking Secure functions from handler mode may cause TF-M IPC  |
+|            | model to behave unexpectedly.                                   |
++------------+-----------------------------------------------------------------+
 
 .. _issue tracker: https://developer.trustedfirmware.org/project/view/2/
 .. _mailing list: https://lists.trustedfirmware.org/mailman/listinfo/tf-m
 
 .. |TFMV-1| replace:: :ref:`docs/reference/security_advisories/stack_seal_vulnerability:Advisory TFMV-1`
+.. |TFMV-2| replace:: :ref:`docs/reference/security_advisories/svc_caller_sp_fetching_vulnerability:Advisory TFMV-2`
 
 .. _TrustedFirmware.org security incident process: https://developer.trustedfirmware.org/w/collaboration/security_center/