Stealthium published two NVIDIA Linux driver vulnerabilities today, Phoronix reports. Both have been in NVIDIA’s open kernel modules for about four years and are rated 7.8 (high):
- ForgePtr (CVE-2026-47501): An unprivileged process in a GPU container can become root on the host. Fixed in 615.71.09.
- NvRoot (CVE-2026-47591): The GPU can be made to rewrite files the OS marked read-only, from any tenant on the node. Fixed in 610.57.04, 595.91.07 and 580.178.04.
Stealthium told Phoronix it has 25 more disclosures coming that affect NVIDIA’s AI runtime stack.
What to do
Check your driver with nvidia-smi and update to a fixed branch, especially on shared GPU hosts or anything running containers for people you don’t fully trust. Renting GPU slices in the cloud? Ask your provider when their hosts will be patched.
My take
Two fixed, 25 on the way. That’s why this one gets garlic. If you’re building a home inference box like the Omarchy 4.6 sharing setup, plan on updating the NVIDIA driver a lot this winter.
God Bless, and Needs Garlic!
