CVE-2021-2131: 
VirtualBox vulnerability analysis and mitigation

Oracle VM VirtualBox prior to version 6.1.18 contains a vulnerability (CVE-2021-2131) that was discovered by ChenNan of Chaitin Security Research Lab. The vulnerability was disclosed in Oracle's January 2021 Critical Patch Update (Oracle CPU).

The vulnerability affects the Core component of Oracle VM VirtualBox. It is an easily exploitable vulnerability that allows a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system (Oracle CPU).

A successful exploitation of this vulnerability could result in a compromise of Oracle VM VirtualBox, potentially affecting the virtualization environment's security (Gentoo Security).

The vulnerability requires a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. The attack complexity is considered low, making it relatively easy to exploit once the attacker has the required privileges (Oracle CPU).

Oracle has released version 6.1.18 of VirtualBox to address this vulnerability. Users are strongly recommended to upgrade to this version or later to mitigate the security risk (Gentoo Security).