NVIDIA Linux GPU Flaws Enable Host Root Access on Shared Servers

Two NVIDIA Linux GPU driver vulnerabilities, NvRoot (CVE-2026-47591) and ForgePtr, can let attackers who already have code execution and GPU access gain root privileges on the host, putting shared GPU servers and multi-tenant cloud environments at risk. Stealthium disclosed research demonstrating protected-memory modification through NvRoot and container escape with host privilege escalation through ForgePtr. NvRoot reportedly abuses the dirty page cache, with GPUs acting as a catalyst. No exploitation in the wild has been reported, and the researchers have not released a downloadable exploit.

Administrators should prioritize shared GPU hosts and verify that their driver release fixes both vulnerabilities. NVIDIA driver 610.57.04 fixes NvRoot but not ForgePtr, while 615.71.09 reportedly fixes both. Other reported NvRoot fixes include 595.91.07 and 580.178.04, but coverage for ForgePtr must be checked separately across driver branches and distribution packages. The NvRoot disclosure states that no sysctl or seccomp workaround is available. After applying the appropriate updates, administrators should reboot and verify the running driver version rather than relying solely on the installed package version.