[AstralStorm]

Grsecurity and Pax are ineffective against almost all kernel bugs. They only make a small set of bugs (relying on suitable code) harder to exploit.

Those measures are meant to protect user space, not the kernel.