Two flaws in NVIDIA’s Linux driver have broken cloud GPU isolation for four years

On November 12, 2026, Stealthium published ForgePtr (CVE-2026-47501) and NvRoot (CVE-2026-47591), two flaws in NVIDIA’s Linux driver that have existed for four years: one lets an unprivileged process in a GPU container become root on the host, the other rewrites read-only files from any tenant. Upgrade to the fixed driver branches, especially if you rent GPU slices.