NVIDIA NvRoot & ForgePtr Vulnerabilities Published For Linux Driver, 25 More Coming

In addition to Jensen Huang resigning, coincidentally the embargo just expired on the first two of 25 more NVIDIA graphics driver security vulnerabilities coming. ForgePtr and NvRoot are particularly volatile for those renting GPU slices in the cloud. Stealthium made public today ForgePtr (CVE-2026-47501) and NvRoot (CVE-2026-47591). With ForgePtr, an unprivileged process in a GPU container can go root on the host. With NvRoot, the GPU can rewrite files the OS has marked as read-only from any tenant on the node. These vulnerabilities have existed in the NVIDIA open kernel modules for the past four years and rated as CVE 7.8 "high" vulnerabilities. NvRoot is fixed by the NVIDIA 610.57.04 / 595.91.07 / 580.178.04 drivers while ForgePtr is fixed in 615.71.09. In a message to Phoronix, Stealthium says they have 25 more security disclosures to come that affect the NVIDIA AI runtime stack. Blog posts provide more details on NvRoot and ForgePtr.