CVE-2026-109096

Security update for xorg-x11-server

No scoreFix available

This update for xorg-x11-server fixes the following issues:

CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write (bsc#1285086).
CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow (bsc#1285087).
CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write (bsc#1285088).
CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow (bsc#1285089).
CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow (bsc#1285090).
CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass (bsc#1285091).
CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply (bsc#1285093).
CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow (bsc#1285094).

What each source reports

OSVopenSUSE-SU-2026:12534-1No score

xorg-x11-server-21.1.25-2.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.25-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12534-1
Updated: 2026-11-12

OSVopenSUSE-SU-2026:12535-1No score

xwayland-24.1.14-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.14-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12535-1
Updated: 2026-11-12

OSVSUSE-SU-2026:5178-1No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write (bsc#1285086).
CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow (bsc#1285087).
CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write (bsc#1285088).
CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow (bsc#1285089).
CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow (bsc#1285090).
CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass (bsc#1285091).
CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply (bsc#1285093).
CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow (bsc#1285094).

Record: SUSE-SU-2026:5178-1
Updated: 2026-11-11

OSVSUSE-SU-2026:5180-1No score

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues:

CVE-2026-109091: X.Org Server EDID DS_RANGES Out-Of-Bounds Write (bsc#1285086).
CVE-2026-109092: X.Org Server XvShmPutImage Shared-Memory Bounds Overflow (bsc#1285087).
CVE-2026-109093: X.Org Server XTestFakeInput Valuator Stack Out-Of-Bounds Write (bsc#1285088).
CVE-2026-109094: X.Org Server XRes QueryResourceBytes Swap Path Size Overflow (bsc#1285089).
CVE-2026-109095: X.Org Server glamor Xv Image Size Integer Overflow (bsc#1285090).
CVE-2026-109096: X.Org Server XvPutImage Negative Image Size Length Bypass (bsc#1285091).
CVE-2026-109903: X.Org Server XvQueryImageAttributes Negative Size Reply (bsc#1285093).
CVE-2026-109904: X.Org Server XRes QueryClientIds Request Size Overflow (bsc#1285094).

Record: SUSE-SU-2026:5180-1
Updated: 2026-11-11

Affected packages

Affected packages
Package	Affected	Fixed
`xorg-server` Alpaquita:stream	21.1.4-r1 up to 21.1.26-r0	21.1.26-r0
`xorg-server` Debian:12	All versions, plus listed versions 2:21.1.10-12:21.1.11-12:21.1.11-22:21.1.11-32:21.1.12-1 Show 39 moreShow less 2:21.1.13-12:21.1.13-22:21.1.13-32:21.1.13-3.12:21.1.14-12:21.1.14-22:21.1.15-12:21.1.15-22:21.1.15-32:21.1.16-12:21.1.16-1.12:21.1.16-1.22:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-22:21.1.7-32:21.1.7-3+deb12u12:21.1.7-3+deb12u102:21.1.7-3+deb12u112:21.1.7-3+deb12u122:21.1.7-3+deb12u132:21.1.7-3+deb12u22:21.1.7-3+deb12u32:21.1.7-3+deb12u42:21.1.7-3+deb12u52:21.1.7-3+deb12u62:21.1.7-3+deb12u72:21.1.7-3+deb12u82:21.1.7-3+deb12u92:21.1.8-12:21.1.9-12:21.1.9-1+hurd.1	None known
`xorg-server` Debian:13	All versions, plus listed versions 2:21.1.16-1.32:21.1.16-1.3+deb13u12:21.1.16-1.3+deb13u22:21.1.16-1.3+deb13u32:21.1.16-1.3+deb13u4 Show 9 moreShow less 2:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-12:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-2	None known
`xorg-server` Debian:14	All versions, plus listed versions 2:21.1.16-1.32:21.1.18-12:21.1.18-22:21.1.20-12:21.1.21-1 Show 5 moreShow less 2:21.1.22-12:21.1.23-12:21.1.24-12:21.1.25-12:21.1.25-2	None known
`xwayland` Debian:12	All versions, plus listed versions 2:22.1.9-12:23.1.0-12:23.1.1-12:23.2.0-12:23.2.1-1 Show 20 moreShow less 2:23.2.2-12:23.2.3-12:23.2.4-12:23.2.6-12:24.0.99.901-12:24.1.0-12:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.2-12:24.1.3-12:24.1.4-12:24.1.4-22:24.1.4-32:24.1.5-12:24.1.6-12:24.1.8-12:24.1.9-1	None known
`xwayland` Debian:13	All versions, plus listed versions 2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.6-12:24.1.8-12:24.1.9-1	None known
`xwayland` Debian:14	All versions, plus listed versions 2:24.1.10-12:24.1.11-12:24.1.12-12:24.1.13-12:24.1.14-12:24.1.6-12:24.1.8-12:24.1.9-1	None known
`xorg-x11-server` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 8 CVEs	before 1.19.6-10.117.1	1.19.6-10.117.1
`xorg-x11-server` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 8 CVEs	before 1.19.6-10.117.1	1.19.6-10.117.1
`xorg-x11-server` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs	before 1.20.3-150400.38.80.1	1.20.3-150400.38.80.1

Show 5 moreShow less

Affected packages
Package	Affected	Fixed
`xorg-x11-server` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs	before 1.20.3-150400.38.80.1	1.20.3-150400.38.80.1
`xorg-x11-server` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs	before 1.20.3-150400.38.80.1	1.20.3-150400.38.80.1
`xorg-x11-server` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs	before 1.20.3-150400.38.80.1	1.20.3-150400.38.80.1
`xorg-x11-server` openSUSE:Tumbleweed From an advisory covering 8 CVEs	before 21.1.25-2.1	21.1.25-2.1
`xwayland` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 24.1.14-2.1	24.1.14-2.1

History

History
Recorded	Changed	Sources
Nov 12, 2026	affected, aliases, references	OSV
Nov 12, 2026	affected, aliases, facts, references	OSV
Nov 11, 2026	affected, aliases, description, published, references, title	OSV
Nov 10, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-109096 is a vulnerability with no CVSS score yet in xorg-x11-server, published November 10, 2026. No source lists public exploit code. Fixed in xorg-server 21.1.26-r0.

References

Show 14 moreShow less