Huuh? The only difference is the kernel version, so it stands to reason to suspect a kernel problem.So I guess it is a Virtualbox problem.
As blacklisting the vboxguest kernel module (the one that comes with the 4.17 kernel) works around the problem suspecting that kernel module to have a bug or to be incompatible with the 4.17 "core" seems logical.
Who maintains that kernel module is not clear to me though.