CVE-2025-9613

CVE-2025-9613

Medium · published December 10, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.1th percentile
Published
2025-12-10T00:15Z
Affected products (1)
ProductVersionsFixed in
pcisig/pci_express_integrity_and_data_encryptionall versions—
References (2)
EPSS history
Timeline
  • 09 DEC 18:52Z
    CVE-2025-9613
    cvelistv5