Matthew Wilcox

The issue is related to the ubifs component of the Linux kernel, where page cache reads are lockless. This allows a simultaneous reader to see old data if the freshly allocated page is set uptodate before the new data is copied into it. The vulnerability can be exploited to cause a denial of service. The `SetPageUptodate` call has been moved to `ubifs write end()`, after the new data has been copied into the page, to resolve the issue. The functions `write begin slow()`, `ubifs write begin()`, and `ubifs write end()` in `fs/ubifs/file.c` are involved in the vulnerability.

A use-after-free flaw was found in the Linux kernel’s core dump subsystem, allowing a local user to crash the system. The issue is related to the `fill files note()` function in the `fs/binfmt elf.c` file. Exploitation of this flaw can cause a denial of service.