CVE-2022-21471: 
VirtualBox vulnerability analysis and mitigation

A vulnerability (CVE-2022-21471) was discovered in Oracle VM VirtualBox's Core component affecting versions prior to 6.1.34. This vulnerability was disclosed in Oracle's April 2022 Critical Patch Update (Oracle Advisory, NVD).

The vulnerability is classified as an easily exploitable issue that allows low privileged attackers with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system. The vulnerability has been assigned a CVSS 3.1 Base Score of 6.5 (Availability impacts) with the vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products due to scope change (NVD).

Oracle has released a patch for this vulnerability in VirtualBox version 6.1.34. Users are strongly advised to upgrade to this version or later to address the security issue. Gentoo Linux users should upgrade to version 6.1.36 or later for a complete fix (Gentoo Advisory).