CVE-2025-9614 — CVE-2025-9614

Description (CNA)

An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
PCI-SIG / PCI Express Integrity and Data Encryption (PCIe IDE) Specification	affected 0 before 6.5-Rev7.0
PCI-SIG / PCI Express Integrity and Data Encryption (PCIe IDE) Specification	affected 0 before 7.1-Rev7.0

CWE

No CWE identifiers supplied.

References

https://pcisig.com/specifications
https://pcisig.com/PCIeIDEStandardVulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.