CVE-2025-9613 - CVE House
Back to Database
Status published Unknown CVE-2025-9613

CVE-2025-9613

Vulnerability Description

A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-9613

Credits & Attribution

No credits recorded in the NVD database.

References

More from PCI-SIG

View All →
CVE-2025-9614
CVE-2025-9614
Unknown 0
CVE-2025-9612
CVE-2025-9612
Unknown 0

Affected Vendor

Affected Software

PCI Express Integrity and Data Encryption (PCIe IDE) Specification
Vulnerable Versions:
0

Timeline

Official Publish: December 9th, 2025
Last Modified: December 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.