Get the Whitepaper called A Bit Away From Kernel Execution. A ‘write-what-where’ kernel memory overwrite tale.
You can download it from the following link: https://packetstormsecurity.com/files/download/107472/kernel-execution.pdf
Source: https://packetstormsecurity.com/files/107472/A-Bit-Away-From-Kernel-Execution.html