CVE-2026-16440
Fixed in a distro release EPSS <1%CVSS 5.7
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
Products: Eclipse Foundation Eclipse OpenJ9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10.2 | java-21-ibm-semeru-certified-jdk | 1:21.0.12.1.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | java-21-ibm-semeru-certified-jdk-devel | 1:21.0.12.1.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | java-21-ibm-semeru-certified-jdk-headless | 1:21.0.12.1.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | java-21-ibm-semeru-certified-jdk-jmods | 1:21.0.12.1.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | java-21-ibm-semeru-certified-jdk-src | 1:21.0.12.1.1-2.el10_2 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-demo | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-devel | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-headless | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-jdbc | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-plugin | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-src | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux 8 | java-1.8.0-ibm-webstart | 1:1.8.0.8.71-1.el8_10 |
| Red Hat Enterprise Linux eus 10.0 | java-21-ibm-semeru-certified-jdk | 1:21.0.12.1.1-1.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | java-21-ibm-semeru-certified-jdk-headless | 1:21.0.12.1.1-1.el10_0 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-30.156.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | java-1_8_0-ibm | 1.8.0_sr8.71-30.156.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | java-1_8_0-ibm | 1.8.0_sr8.71-150000.3.125.1 |