VirtualBox 7.0.16 Update Released

by

Oracle Company published corrective release of the virtualization system VirtualBox 7.0.16, which noted 15 corrections. In addition to these changes, the new version eliminates 13 vulnerabilities7 of which are marked as dangerous (four problems have a danger level of 8.8 out of 10, and three have a danger level of 7.8 out of 10).

Details about the vulnerabilities are not disclosed, but judging by the severity level set, they allow access to the host environment from guest systems. Two vulnerabilities appear only on Linux hosts and two only on Windows hosts. One of the vulnerabilities allows a remote attack via HTTP without authentication, but the severity level for this problem is set at 5.9 out of 10 due to the complexity of exploitation.

Advertisement

Basic changes in VirtualBox 7.0.16:

  • The Host and Guest Additions add initial support for the Linux 6.9 kernel. In additions for guest systems, support for kernel 6.8 has been added (for hosts, kernel 6.8 was previously supported).
  • In additions for Linux-based hosts and guests, the ability to disable automatic loading of a kernel module has been added by setting the mod_name.disabled=1 parameter on the kernel command line.
  • In Linux-based host environments, problems with building Linux kernel modules when using the GCC 13.2 compiler have been resolved.
  • In Linux-based host environments, problems with determining the VBoxSVC IPC socket in the VBox.sh startup script, which appear when starting a virtual machine using the sudo utility, have been resolved.
  • The Linux Host and Guest Additions have addressed warnings related to UBSAN and mk_pte support.
  • Windows Guest Additions feature graphics-related improvements.
  • In macOS host environments, issues with virtual machine performance degradation when using App Nap have been resolved.
  • Launching nested guests using the KVM hypervisor on hosts with Intel CPUs has been simplified.
  • Fixed a virtual machine crash that occurred on some new AMD CPUs.
  • The USB driver solves problems with EHCI controllers.
  • Improved support for audio devices.
  • The documentation for the VBoxManage and vboximg-mount utilities has been updated.
  • The Guest Control package ensures that the correct Windows session is used when running processes in Windows guest environments.

Thanks for reading:

Advertisement