Two NVIDIA GPU vulnerabilities enable unprivileged-to-root escalation in multi-tenant environments

·2026.11.13 04:20

Key point

ForgePtr and NvRoot allow unprivileged processes to gain root access and modify read-only files on the host, compromising GPU container isolation.

Two vulnerabilities, ForgePtr (CVE-2026-47501) and NvRoot (CVE-2026-47591), allow unprivileged processes in GPU containers to escalate to root on the host.
ForgePtr enables disabling kernel lockdown and module signing on Secure Boot machines, while NvRoot permits rewriting OS-marked read-only files from any tenant.
The bugs existed in NVIDIA's open-source driver for over four years and are now patched.
NVIDIA rates the vulnerabilities as 7.8 severity, but they pose a critical risk in neocloud environments where 'local' access implies access to other tenants' production AI.

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.