Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-9614

CVE-2025-9614

Description

An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PCI-SIG PCI Express Integrity and Data Encryption (PCIe IDE) Specification

  • 0 to < 6.5-Rev7.0affected

PCI-SIG PCI Express Integrity and Data Encryption (PCIe IDE) Specification

  • 0 to < 7.1-Rev7.0affected

References