Medium (5.9). EPSS 0.1% chance of exploitation in the next 30 days.
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.