Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
SUSE Linux Kernel Security Update: Unpatched Bluetooth and AppArmor Flaws
published 6 months ago
Summary
SUSE Linux Enterprise 15 SP7 users should update their kernel to fix security issues that could allow an attacker to cause a denial of service or elevate privileges. The update addresses two vulnerabilities: one related to Bluetooth connectivity and another that affects AppArmor's policy management. Apply the update to ensure your system remains secure.
What to do
- Update suse kernel-livepatch-sle15-sp7_update_2 to version 13-150700.2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Live Patching 15 SP7 | suse | kernel-livepatch-sle15-sp7_update_2 |
< 13-150700.2.1 Fix: upgrade to 13-150700.2.1
|
Original advisory text
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues
The following security issues were fixed:
- CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066).
- CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20261456-1/ Vendor Advisory
- https://bugzilla.suse.com/1255066 Third Party Advisory
- https://bugzilla.suse.com/1259859 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-40309 URL
- https://www.suse.com/security/cve/CVE-2026-23268 URL
Timeline
Published19 Apr 2026
Updated21 Apr 2026
First seen21 Apr 2026
Sources
SUSE-SU-2026:1456-1 · OSV
Track software like this
Free during beta