What’s Vulnerable › Vulnerabilities

CVE-2025-9613: CVE-2025-9613

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-09 · updated 2026-10-14

Description

A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.

Affected products

• PCI-SIG PCI Express Integrity and Data Encryption (PCIe IDE) Specification: all versions

References

• https://pcisig.com/PCIeIDEStandardVulnerabilities
• https://pcisig.com/specifications

Get alerted when CVE-2025-9613 or the next vulnerability affects your stack