Two NVIDIA driver bugs lurked 4+ years, letting GPU tenants root the host
SirJerryLion · reddit · 2026-11-13
Two newly disclosed NVIDIA vulnerabilities break the tenant-isolation promise of multi-tenant GPU clouds (neoclouds):
- ForgePtr (CVE-2026-47501): escalates an unprivileged process inside a GPU container to root on the host, then disables kernel lockdown and module signing even on Secure Boot machines.
- NvRoot (CVE-2026-47591): lets the GPU rewrite files the OS marks read-only, from any tenant on the node.
Both sat in NVIDIA's open-source driver for 4+ years and are now patched. NVIDIA scores them 7.8 as "local" bugs, but on rented GPU slice nodes "local" means every tenant — attackers can effectively rent their way into someone else's production AI. Full writeups at stealthium.io.
More from Infra
- RL engineering debate: decoupled rollout vs colocated vLLM, staleness is not a rounding error — willcb · 2026-11-13
- Chutes' Parallax hits ~18,000 tok/s on one RTX 5090, ~1 cent per million tokens — bittingthembits · 2026-11-13
- LLM gateway latency benchmarked: 0.21ms median overhead but 89ms at p99 — jkriket · 2026-11-13
- Miles v0.2 Debuts at SGLang Summit: RL Training Across NVIDIA, AMD, TPU, Trainium — ying11231 · 2026-11-13
- A 14-minute video traces one ChatGPT question from the Enter key to the GPU and back — Glass-Garden-5888 · 2026-11-13
- Burkov's weekly: 94% of UK students use AI for assessed work, CUDA Rust, e-means — burkov · 2026-11-13