request.getSession(false) returns sessions after session.invalidate

The request.getSession(false) method returns an invalid session after the session has already been invalidated.

Example code (inside Filter/Servlet/JSP):

//Create session
HttpSession session = request.getSession();

//Invalidate Session
session.invalidate();

//Re-Get the session (should return null, but does not):
session = request.getSession(false);
if(session != null) {
session.getAttribute("foo"); //Leads to IllegalStateException since returned session is invalidated!!
}

According to the Servlet-API: request.getSession(false) must return null if no valid session for the current request is available.