A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free. CREATE(Triage):(User=admin) CVE-2025-26594 (https://nvd.nist.gov/vuln/detail/CVE-2025-26594)
