Background
Microsoft’s Security Response Guide entry for CVE-2026-23285 points to a Linux kernel issue in DRBD: a null-pointer dereference on local read error. The upstream patch title is unambiguous enough to tell the story at a glance: drbd: fix null-pointer dereference on local read error...