An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Pcisig |
|
No data.
No data.
References
History
Wed, 14 Jan 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Pcisig
Pcisig pci Express Integrity And Data Encryption |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:pcisig:pci_express_integrity_and_data_encryption:-:*:*:*:*:*:*:* | |
| Vendors & Products |
Pcisig
Pcisig pci Express Integrity And Data Encryption |
Wed, 10 Dec 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Tue, 09 Dec 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 09 Dec 2025 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity. | |
| Title | CVE-2025-9614 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2025-12-10T20:09:20.429Z
Reserved: 2025-08-28T15:44:38.469Z
Link: CVE-2025-9614
Vulnrichment
Updated: 2025-12-10T20:08:34.484Z
NVD
Status : Analyzed
Published: 2025-12-09T19:15:50.943
Modified: 2026-01-14T17:44:00.217
Link: CVE-2025-9614
Redhat
No data.
OpenCVE Enrichment
No data.