CVE-2026-44673 is a vulnerability in libyang, a C-based YANG data modeling language parser and toolkit, that permits denial of service or arbitrary code execution when processing maliciously crafted LYB binary blobs. This vulnerability affects Red Hat Enterprise Linux 8 across various supported architectures. Red Hat Product Security has released an important security advisory (RHSA-2026:24545) with updated libyang packages to remediate this issue. The advisory provides detailed package updates and instructions for applying the fix. No CVSS score is provided, but the severity is rated as high.

Successful exploitation of this vulnerability could allow an attacker to cause a denial of service or execute arbitrary code on affected systems running vulnerable versions of libyang. This could lead to system instability or compromise. However, there are no known exploits in the wild at this time.

Red Hat has released updated libyang packages for Red Hat Enterprise Linux 8 to address this vulnerability. Users should apply these official security updates as described in the Red Hat advisory RHSA-2026:24545 and the referenced article https://access.redhat.com/articles/11258. Applying these updates will mitigate the risk of denial of service or arbitrary code execution via malicious LYB blobs.