CVE-2026-21046

A time-of-check time-of-use race condition in the fabricKeymaster trustlet prior to the SMR Jul-2026 Release 1 enables local privileged attackers to execute arbitrary code, potentially compromising the integrity of the system. Organizations utilizing affected products should prioritize remediation efforts to mitigate the risk of exploitation by malicious insiders or attackers with local access.