CVE-2023-21889: 
VirtualBox vulnerability analysis and mitigation

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The vulnerability affects versions prior to 6.1.42 and prior to 7.0.6. This easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox (Oracle CPU).

The vulnerability was discovered by Aobo Wang and Kun Yang of Chaitin Security Research Lab (Oracle CPU). The vulnerability exists in the Core component of VirtualBox and requires local access to the system where VirtualBox is installed. The severity of this vulnerability is considered high, as indicated by its inclusion in security advisories (Gentoo Security).

A successful exploitation of this vulnerability could result in the compromise of Oracle VM VirtualBox, potentially allowing an attacker to gain unauthorized access to the virtualization environment (Oracle CPU).

Oracle has released security patches to address this vulnerability. Users are advised to upgrade to VirtualBox version 7.0.6 or later, or version 6.1.46 or later if still using the 6.x branch (Gentoo Security).