Exploiting an I/OMMU vulnerability
Enforcing kernel constraints by hardware-assisted virtualization