The biggest Nvidia story of the week did not come from a benchmark. Jensen Huang is out as CEO, and the fallout landed on the Linux driver, the open source world and the stock market all at once.
Nvidia's Linux driver has a root problem, and 25 more disclosures are coming
Security researchers at Stealthium published the first two of 27 NVIDIA driver vulnerabilities they have in the pipeline: ForgePtr (CVE-2026-47501) lets an unprivileged process in a GPU container go root on the host, and NvRoot (CVE-2026-47591) lets the GPU rewrite files the OS marked read-only from any tenant on the node. Both sat in the open kernel modules for four years and rate 7.8 high. Anyone renting GPU slices in the cloud should care a lot. Fixed in the 610.57.04, 595.91.07, 580.178.04 and 615.71.09 drivers. Source: https://www.phoronix.com/news/NVIDIA-NvRoot-ForgePtr
Rust 1.100 lands, and the "never" type is finally stable
Twelve years after it was first proposed, Rust 1.100 stabilizes the never type, the type of computations that never return. It sounds academic until you notice how much library code has been waiting on it. Phoronix has the release notes. Source: https://www.phoronix.com/news/Rust-1.100
PostgreSQL ships fixes for 52 security holes
The PostgreSQL project released new versions of every supported branch on Thursday: 18.7, 17.12, 16.16, 15.20, 14.25 and 19 RC2, covering 52 security vulnerabilities plus more than 140 bug fixes. If you run Postgres anywhere, this is your patch-this-week reminder. Source: https://www.phoronix.com/news/PostgreSQL-52-Security
Hugging Face's CEO promises to keep fighting for open source AI
With Nvidia's planned $12.9 billion acquisition of Hugging Face now in limbo after Jensen Huang's exit, CEO Clément Delangue posted that the whole thing sucks but the company will keep fighting for open-source AI, harder than ever. TechCrunch notes the post is as much about reassuring the community as it is about the deal. Source: https://techcrunch.com/2026/11/12/hugging-face-ceo-vows-to-keep-fighting-for-open-source-ai-after-jensen-huangs-exit/
United Airlines tells AI agents to get lost
United Airlines said it will block AI agents from booking flights and managing reservations on customers' behalf, citing cybersecurity risks and the nightmare of telling a real customer apart from an assistant holding their password. It is the latest big company to decide that your chatbot is a credential-sharing problem wearing a convenience costume. Source: https://techcrunch.com/2026/11/12/united-airlines-blocks-ai-agents-from-booking-flights-citing-cybersecurity-risks/