New PCIe flaws hit Intel, AMD processors

Intel and AMD have confirmed that some of their processors are impacted by a trio of new low-severity PCI Express flaws, tracked as CVE-2025-9612, CVE-2025-9613, and CVE-2025-9614, according to SecurityWeek.

Threat actors with physical or low-level access to the targeted computer's PCIe Integrity and Data Encryption interface that helps ensure data transfer security could exploit the vulnerabilities to prompt incorrect or stale data consumption, which could eventually result in data leaks, privilege escalation, or a denial-of-service condition, said the CERT Coordination Center.

While Intel and AMD reported impact on certain Xeon 6 and Xeon 6700P-B/6500P-B series processors and EPYC 9005 series chips, respectively, Dell, Keysight, NVIDIA, and F5 have denied potential compromise. Arm, Google, IBM, HP, Qualcomm, Lenovo, and Cisco have yet to disclose whether they have been affected by the bugs, noted CERT/CC.