Microsoft’s advisory for CVE-2026-23286 points to a null-pointer dereference in the ATM LEC code path, specifically in lec_arp_clear_vccs, which is the kind of bug that can turn an otherwise routine networking cleanup path into a kernel crash. The short description implies a defensive fix rather...