E02-AX: Yes

Rationale

Stanislav Fort (Aisle Research) published a security-focused source review of Linux NET/ROM connection-frame parsing in August–September 2025. The final v4 report identifies missing length validation for the transport header, connection acknowledgements and connection requests, and explains remote malformed-frame exposure. It includes a corrective diff and Eric Dumazet's review attribution. The selected Linux v6.12 af_netrom.c contains the same nr_rx_frame accesses and connection branches. This is published external implementation analysis of a security-critical mechanism in the selected AX.25/NET/ROM composition, sufficient for the scoped E02 criterion.

Assessment method

Published third-party security source review mapped to the selected implementation; no execution

Source context

Stanislav Fort, NET/ROM nr_rx_frame security review v4, 6 September 2025; public maintainer correspondence; selected Linux v6.12 source

Outstanding qualification

Scope is the Linux receive/parser and circuit-establishment path, not a whole-protocol audit, cryptographic proof or clean security result. Aisle is the external reporting organization; Linux maintainers reviewed the patch. Public attribution is recorded, without a separate financial/conflict investigation. Fort explicitly said the early report had no specific stack trace; neither that correspondence nor this round establishes an executed exploit. Later patch revisions refine the proposed checks, so v4 is the primary analysis. The v6.12 source mapping does not assert vulnerability of every current kernel or deployed NET/ROM system, nor acceptance of every proposed patch detail. No F15 availability verdict or runtime qualification changes.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

round443-sources.json
round443.html