# NVIDIA Patches Linux GPU Driver Flaw

The reported vulnerability CVE-2026-47501 affects NVIDIA’s Linux GPU driver and could allow an unprivileged user inside a GPU container to gain root access on the host, putting isolation at risk in shared, multi-tenant GPU services. NVIDIA fixed the issue in driver version 615.71.09. Government agencies and contractors using or procuring GPU cloud services should treat the vulnerability as a service-security and supply-assurance concern.

- Operators using affected drivers should update to version 615.71.09; the report advises keeping GPU devices away from untrusted tenants until they are patched.
- Procurement teams evaluating GPU cloud providers can ask providers to confirm driver patch status and explain how they isolate tenants from host systems.
- Contractors operating shared GPU environments should assess whether untrusted tenants can access GPU devices before applying the fix.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Cloud Services
**Published:** November 12, 2026

### Vendors
- NVIDIA ()

### Key Quotes
> NVIDIA reports it fixed in 615.71.09. We hardcore recommend updating now, and, as always, to keep GPU devices away from untrusted tenants until you have.
> — Original poster

### Sources
- [ForgePtr (CVE-2026-47501): a NVIDIA driver LPE, aka, how an attacker could rent root for multi-tenant GPU cloud environments](https://www.reddit.com/r/cybersecurity/comments/1xuij4m/forgeptr_cve202647501_a_nvidia_driver_lpe_aka_how) - reddit-cybersecurity