An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing durin…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 9, 2025 · NIST NVD

   Detected

   An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.

2. Oct 14, 2026 · NIST NVD

   Updated

   An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.

Affected

• cpe pcisig/pci express integrity and data encryptionversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-9614

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-9614

  30-day exploitation probability 0.1%

  first.org
• NIST NVDVulnerability recordCVE-2025-9614

  An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new o

  nvd.nist.gov

References

• Vendor Advisory · pcisig.com
• Product · pcisig.com