X.org: xwayland: use-after-free of the root cursor (CVE-2025-26594) | HOL Guard CVE