Their PoC does as you say, but is built upon arbitrary modification of the page cache, which could be abused for the other things