CVE-2024-21094
A flaw was found in the C2 compiler in the Hotspot component of OpenJDK. C2 compilation fails with "Exceeded _node_regs array" due to an improper size validation and out-of-bounds array access, potentially resulting in a corruption of the JVM memory. Upstream OpenJDK issue: https://bugs.openjdk.org/browse/JDK-8317507
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21094?
CVE-2024-21094 is considered a high severity vulnerability due to the potential for JVM memory corruption.
How do I fix CVE-2024-21094?
To fix CVE-2024-21094, you should update OpenJDK to the recommended patched versions for your system.
Which versions of OpenJDK are affected by CVE-2024-21094?
CVE-2024-21094 affects various versions of OpenJDK including versions 8, 11, 17, and 21 up to specific builds.
What type of vulnerability is CVE-2024-21094?
CVE-2024-21094 is an out-of-bounds access vulnerability found in the C2 compiler of the Hotspot component of OpenJDK.
What products are impacted by CVE-2024-21094?
CVE-2024-21094 impacts IBM Storage Protect Backup-Archive Client as well as several OpenJDK packages on Debian.