Vulnerability is in GPU firmware (GSP / secure microcontroller), loaded by the host kernel driver. Echo ships only the userspace
cuda-compat libraries (libcuda, nvvm, ptxjitcompiler, ...) via the cuda-* packages; that
component is provided by the host, not the image.
https://github.com/NVIDIA/product-security/tree/main/2026/5861