Why Oracle claims java.util.Random.nextFloat() generates 2^24 possibilities and not 2^23?

According to the documentation for java.util.Random, the Java class implements nextFloat by next(24) / ((float)(1 << 24)) (ie. a random non-negative integer with 24 bits divided by 2²⁴). The documentation claims that all 2²⁴ possible values can be returned. They are between 0 (inclusive) and 1 (exclusive). However, I don't think that is true.

First, note that according to the IEC 559 (IEEE 754) standard, float has 23 fraction bits. But there is an implicit leading bit (to the left of the binary point) with value 1, unless the exponent is stored with all zeros. Therefore, it is true that there are a total of 2²⁴ values of type float that are between 0 (inclusive - not counting negative zero) and 1 (exclusive), but exactly half of these numbers are subnormal (all bits in the exponent are 0), which makes them all less than 2^-126. Therefore, none of these numbers can be generated by the implementation. This is because they are all strictly smaller than 2^-24 which is used in the implementation.

Layout of float can be found at Single-precision floating-point format.

So what it is that I am missing?