Rent a Slice, Get the Host: What NvRoot and ForgePtr Say About AI Runtime Trust

Researchers at Stealthium have discovered two privilege escalation vulnerabilities, NvRoot and ForgePtr, in the NVIDIA GPU driver that undermine multi-tenant isolation on shared AI cloud nodes. The bugs allow unprivileged users to gain root access or write to kernel memory, threatening the fundamental trust stack of AI inference and training infrastructure. The company urges GPU infrastructure operators to patch their drivers immediately and recommends that renters question providers about their current driver versions. Open article →