Overlapping Mappings in STM32's NAND Controller

CVE-2025-39907

What is CVE-2025-39907?

A vulnerability has been identified in the STM32MP257F's NAND controller regarding overlapping mappings on the ECC buffer. This issue can lead to cacheline tracking errors and improper handling of DMA mappings, potentially compromising data integrity during NAND operations. To mitigate this, the affected Linux kernel components have been revised to utilize a contiguous non-cacheable buffer, which prevents the occurrence of overlapping mappings. Users are advised to update their systems to ensure the reliability and security of their operations.

References