Driver Linux de código aberto da NVIDIA · Disclosed

NvRoot enables root access in multi-tenant GPU environments

Nov 12, 2026 · 1 min read

The NvRoot flaw allows an unprivileged user to gain root access using GPUs in multi-tenant environments. The risk is highest for customers renting shared GPUs from neoclouds. Update to version 610.57.04, 595.91.07, or 580.178.04.

By HIFY Radar newsroom Updated 11/12/2026 03:17 PM Get this every day →← Back to the feed 2 sources

HighVulnerabilityDisclosedPatched

In 30 seconds

Alleged

The latest decisive update is that NvRoot, tracked as CVE-2026-47591, is reportedly fixed in NVIDIA Linux driver versions 610.57.04, 595.91.07 and 580.178.04. A Stealthium researcher says the flaw can let an unprivileged tenant gain root access on a shared GPU host, with no sysctl or seccomp workaround available.

What happened

Alleged

Stealthium describes NvRoot as a local privilege-escalation flaw involving the page cache. According to its researcher, a tenant can use the GPU to rewrite files that the operating system treats as read-only, creating a path from an unprivileged account to root on the host.

Why it matters

Inferred

In a multi-tenant GPU service, “local” access may include every customer sharing the same physical node. If the reported path works as described, renting GPU capacity could provide the foothold needed to reach the host and potentially expose other tenants or production AI workloads.

What to do

Alleged

Operators of shared NVIDIA GPU hosts should check their deployed Linux driver branch and move to a reported fixed release: 610.57.04, 595.91.07 or 580.178.04. The researcher says sysctl and seccomp settings do not provide a workaround, so configuration hardening should not be treated as a substitute for the patch.

Confirmed and still uncertain

Observed

The supplied evidence identifies the vulnerability, its claimed mechanism, the highest-risk deployment model and three fixed versions. It does not independently establish the full affected-version range, whether exploitation has occurred in the wild, the exact prerequisites for a successful attack or whether additional mitigations are effective.

What people are saying

Observed

ChrisAtStealthium says the issue is most dangerous for customers renting multi-tenant GPUs from neocloud providers and discloses that he works alongside the Stealthium team that found it. In a separate post, he characterizes the practical risk as attackers being able to rent their way toward production AI systems.

Evolution

Alleged

The researcher alleges that the vulnerable behavior remained in NVIDIA’s open-source driver for four years before being patched. The public disclosure then presented the issue as CVE-2026-47591 and named fixed releases across three driver branches.

Reach

Observed

3 independent groups, 2 updates, and 0 engagements. Observed communities: r/netsec, r/pwnhub.

Technical detail

Alleged

Stealthium labels NvRoot a “dirty page cache” local privilege escalation with the GPU acting as a catalyst. In the researcher’s account, GPU-mediated writes can alter files despite read-only protections, and modifying security-sensitive host files then enables escalation to root.

Sources and evidence

Observed

This evidence batch contains a Stealthium blog-feed entry and two substantive Reddit posts from an author who identifies himself as working with the discovery team. The detailed mechanism, exposure assessment, four-year timeline, severity framing and remediation claims therefore come from the researchers; no NVIDIA advisory or independent technical reproduction is included here.