The story of exploiting kmalloc() overflows

Recently, many kernel level heap (kmalloc) overflows have been discovered which were rated "unclear" with regard to exploitation. This article written by qobaiashi aims at explaining the kernels heap management, with security and exploitation of heap overflows in kernel space in mind.
http://doc.bughunter.net/buffer-overflow/kmalloc-overflow.html