Intel, AMD Processors Affected by PCIe Vulnerabilities

SecurityWeek reports that three recently discovered PCI Express vulnerabilities, tracked as CVE-2025-9612, CVE-2025-9613, and CVE-2025-9614, affect PCIe IDE and were identified by Intel employees. PCIe IDE uses AES-GCM encryption to protect data between PCIe components, and CERT/CC’s advisory notes that exploitation can lead to information disclosure, privilege escalation, or DoS, though the flaws are classed as low severity because exploitation requires physical or low-level access to the PCIe IDE interface.

According to CERT/CC’s advisory, Intel and AMD have confirmed that some of their products are affected, while Nvidia, Dell, F5, and Keysight said they are not; a number of other vendors have an unknown impact status. Intel has published an advisory stating that some Xeon 6 and Xeon 6700P-B/6500P-B series processors are affected, and AMD has published an advisory indicating its EPYC 9005 series (including embedded) processors may be impacted. Written by Eduard Kovacs, this piece appeared on 10 December 2025.