CVE-2023-5676: eclipse foundation openj9 Signal Handler Race Condition

Vulnerability summary

CVE-2023-5676 is a medium (CVSS 5.9) Signal Handler Race Condition vulnerability in eclipse foundation openj9. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.6% of scored vulnerabilities.

Timeline

1. 15-11-2023
   PublishedVulnerability first disclosed.
2. 03-11-2025
   Last modifiedVulnerability information updated.

Description

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

• CWE-364Signal Handler Race ConditionThe product uses a signal handler that introduces a race condition.
• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.