Microchip 48LM01 memory secure read operation CRC and STM32 hardware CRC
What is wrong is that the chip datasheet clearly mentions that only the valid bits of the address are used for CRC calculations.
As the 48LM01 uses 17 address bits, the upper 7 bits of the first address byte are not used in the CRC calculations, and thus it is incorrect to calculate the CRC by using the whole byte.