The vulnerability arises from the absence of lock‑bit protection on NBIO registers, allowing a local administrator to alter MMIO routing configurations. Altering these routes can compromise the integrity of SEV‑SNP guests, potentially exposing sensitive data or allowing further privilege escalation within the virtualized environment.

AMD EPYC 7003, 8004, 9004, 9005 series processors and embedded variants (including former code names Genoa, Bergamo, and 9004 Embedded).

The CVSS score of 5.9 indicates moderate severity, and no EPSS data is currently available; the vulnerability is not listed in CISA KEV. Exploitation requires local admin rights and access to the platform’s NBIO registers, meaning the attack vector is local and requires privileged execution. An attacker who succeeds could re‑route memory accesses to bypass SEV‑SNP protection, leading to data corruption or leakage.