Description
An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to unintended data access across trusted domains, compromising confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PCI-SIG | PCI Express Integrity and Data Encryption (PCIe IDE) Specification | < 6.5-Rev7.0, < 7.1-Rev7.0 | 6.5-Rev7.0 |
Advisories 1
- WID-SEC-2025-2809 AMD- und Intel-Prozessoren (PCIe IDE): Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 9, 2025