Threats affecting pkg:deb/debian/xserver

CVE-2026-109096 is a vulnerability in X.Org xwayland and X Server where incorrect handling of negative return values from ddQueryImageAttributes() during XvPutImage requests can cause the X server to crash. This affects versions of xwayland before 24.1.15 and X Server before 21.1.26. The flaw allows authenticated X clients to trigger a denial-of-service condition by crashing the server.