An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) orde…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 9, 2025 · NIST NVD

   Detected

   An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical attackers on the PCIe bus to violate data integrity protections.

2. Oct 14, 2026 · NIST NVD

   Updated

   An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical attackers on the PCIe bus to violate data integrity protections.

Affected

• cpe pcisig/pci express integrity and data encryptionversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-9612

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-9612

  30-day exploitation probability 0.1%

  first.org
• NIST NVDVulnerability recordCVE-2025-9612

  An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enabl

  nvd.nist.gov

References

• Third Party Advisory · kb.cert.org
• Vendor Advisory · pcisig.com
• Product · pcisig.com