Description
A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completions being delivered to the wrong security context, potentially compromising data integrity and confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PCI-SIG | PCI Express Integrity and Data Encryption (PCIe IDE) Specification | < 7.1-Rev7.0, < 6.5-Rev7.0 | 7.1-Rev7.0 |
Advisories 1
- WID-SEC-2025-2809 AMD- und Intel-Prozessoren (PCIe IDE): Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 9, 2025