Proof/Linux kernel

§ Upstream contributions

Four accepted mainline fixes across two subsystems.

Linux contribution credit is represented exactly as recorded upstream. Two patches were authored and signed off by Charles Vosburgh; two accepted KSMBD fixes carry Reported-by: Charles Vosburgh with patches authored by Namjae Jeon. The first authored SCTP fix has six verified stable-tree backports.

4
Accepted mainline contributions
Present in upstream Git history.
2
Patches authored and signed off
Signed-off-by: Charles Vosburgh
2
Accepted fixes reported
Reported-by: Charles Vosburgh
6
Verified stable backports
All from the first authored SCTP fix.
Mainline commitSubsystemContributionRoleReleaseSecHive
74b21f52c5c5net/sctpmainlinesctp: validate Adaptation Indication parameter lengthPatch author · Signed-off-byLinux 7.2 · 6 stable releasesWrite-up
6cfc1b90cb86net/sctpmainlinesctp: validate chunk length in the inqueue parserPatch author · Signed-off-byMainline · applied to netdev/net.git 2026-08-30Write-up
e148e567a925fs/smb/servermainlineksmbd: preserve VFS inherited POSIX ACL maskReported-by · patch by Namjae JeonLinux 7.2 · first in 7.2-rc5Write-up
2bebf2470af1fs/smb/servermainlineksmbd: enforce signing required by the sessionReported-by · patch by Namjae JeonFirst in Linux 7.2-rc5Write-up
§ Contribution roles

Credit is recorded, not rounded up.

Reporting a kernel bug and authoring the accepted patch are different contributions. Both matter; conflating them does not help anyone reading the record.

Patch author

Two mainline patches carry Charles Vosburgh as author. For 74b21f52c5c5, the commit records:

Signed-off-by: Charles Vosburgh <trilobyte777@gmail.com>
Acked-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Reporter

For the two KSMBD fixes, the mainline commits record Reported-by: Charles Vosburgh. Namjae Jeon authored both accepted patches and Steve French signed them into the SMB tree; ChenXiaoSong tested and reviewed the signing fix. The write-ups preserve that distinction rather than presenting reporting credit as patch authorship.

What the write-ups separate

  • patch authorship, Signed-off-by, Reported-by, review and maintainer credit;
  • behaviour demonstrated during research versus behaviour inferred from source;
  • public upstream version boundaries versus independently checked releases;
  • the original failure mode versus the invariant restored by the accepted patch;
  • mainline inclusion versus stable backports independently established.
No executable reproducers. These pages document upstream fixes for defensive research, regression testing and patch verification. Private harnesses, lab captures and raw evidence are not published.