Practical Timing Side Channel Attacks Against Kernel Space ASLR (2013) [pdf]

and one related article, <i>TSX improves timing attacks against KASLR</i><p><a href="http://labs.bromium.com/2014/10/27/tsx-improves-timing-attacks-against-kaslr/" rel="nofollow">http:&#x2F;&#x2F;labs.bromium.com&#x2F;2014&#x2F;10&#x2F;27&#x2F;tsx-improves-timing-attac...</a>