CVE-2025-39907

What it actually does

The flaw permits overlapping DMA mappings on the ECC buffer in the STM32 FMC2 NAND driver, leading to memory corruption in kernel space during NAND operations.

Why it matters to the business

Systems using affected Linux kernel versions on STM32-based hardware face risk of crashes, data corruption, or potential privilege escalation, increasing downtime and patching urgency in embedded and IoT deployments.

How an attack unfolds

An attacker with local access triggers the NAND driver path that causes overlapping mappings on the ECC buffer, resulting in memory corruption that can be leveraged for privilege escalation; unrelated threat actor references like VMSCAPE do not indicate active exploitation of this issue.

How to fix it

Update the Linux kernel to the fixed commit dc1c6e60993b93b87604eb11266ac72e1a3be9e0 or later; for SUSE Linux Enterprise Module for Basesystem 15 apply version 5.5-3.3.15 or newer.

How to confirm the fix worked

Confirm kernel version includes commit dc1c6e60993b93b87604eb11266ac72e1a3be9e0 and test NAND ECC operations on STM32 hardware to verify no overlapping mappings occur.

Typical attack path

1. Obtain local code execution on the target system
2. Trigger NAND flash operations that exercise the STM32 FMC2 driver ECC buffer handling
3. Exploit resulting memory overlap for corruption and escalation

How to detect it

Review kernel logs for DMA mapping warnings or ECC buffer errors around NAND operations; no confirmed exploitation artifacts are known given the low EPSS and lack of KEV listing.

What your security team should do

• Prioritize kernel upgrades on all STM32 FMC2 NAND systems within standard change windows
• Monitor upstream stable kernel releases for backports of the fix
• Review device trees and drivers for custom NAND configurations that may increase exposure