Writing Kernel Exploits [pdf]

Linux kernel to be more specific.<p>The Mac OS X/iOS kernel (xnu) doesn't share the address space with the user process, so many of those techniques (I haven't read the whole paper) do not apply.