Linux kernel vulnerabilities affect the entire world. The world does not revolve around the U.S., and I find it extremely unlikely a university professor in the U.S. doing research for a paper did this on behalf of the Chinese government.

It's far more likely that professor is so out of touch that they honestly think their behavior is acceptable.

If that's the case, why would they publish a paper and announce their "research" to the world?