Summary
Ein lokaler privilegierter Angreifer kann mehrere Schwachstellen in der PCI Express (PCIe) Integrity and Data Encryption (IDE)-Spezifikation ausnutzen, die mehrere AMD- und Intel-Prozessoren betreffen, um seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
Product
Prozessoren sind die zentralen Rechenwerke eines Computers.
Der Prozessor ist das zentrale Rechenwerk eines Computers.
Vulnerabilities 3
-
Medium 6.5
CVE-2025-9613
A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag a…
-
Medium 6.5
CVE-2025-9614
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be…
-
Medium 5.1
CVE-2025-9612
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without dete…
Revision history
-
#1
Initiale Fassung
References
-
PCI Special Interest Group - PCIe IDE Standard Vulnerabilities vom 2025-12-09
https://pcisig.com/PCIeIDEStandardVulnerabilities
-
CERT/CC VU#404544 vom 2025-12-09
https://kb.cert.org/vuls/id/404544
-
AMD Security Bulletin AMD-SB-7056 vom 2025-12-09
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7056.html
-
Intel Security Advisory INTEL-SA-01409 vom 2025-12-09
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01409.html