Security firm Stealthium said on 12 November that it found a flaw in NVIDIA's GPU driver. The bug is tracked as CVE-2026-47591 and nicknamed NvRoot. Stealthium says one driver request can give the GPU write access to a file the user may only read. It pointed this at the setuid program /usr/bin/su, changed its copy in memory, and ran it to get a root shell. The file on disk stays untouched. Stealthium confirmed this on driver 610.43.02 and found it fixed in 610.57.04.
NVIDIA has released updates for its GPU display driver and vGPU software. Its bulletin credits CVE-2026-47591 to a researcher named junghyunpark2001, while Stealthium says its own team found and reported the bug. Stealthium did not publish exploit code and held back some details. The full list of affected driver versions is not stated here. NVIDIA says its risk ratings are averages and may not fit each installation.
Stealthium says the poisoned memory is shared with the host. So a customer renting a GPU container could affect the host and other tenants. NVIDIA scores the bug 7.8, High. Stealthium advises treating it as Critical on multi-tenant GPU systems. Anyone running shared GPU servers should check their driver version, since file-integrity checks on disk would not show this change.