cvedb.io
CVE-2025-9613
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2025-12-09T19:15:50.837 · Last modified 2026-06-17T10:09:22.907

Summary

A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.

Affected products

pcisig — pci_express_integrity_and_data_encryption

Does this affect you?

Add your gear to cvedb and we'll alert you only when pcisig ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.