CVE-2025-9613: Pcisig Pci Express Integrity And Data Encryption

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.

Affected products

• Pcisig Pci Express Integrity And Data Encryption: affected versions not specified

Published 2025-12-09. Last modified 2026-06-17.