[kerneis]

Kernel ASLR. User-space has ASLR enabled and working, in addition to shadow stacks and a number of other hardening techniques.

[binkHN]

The article also references syscalls that are marked with TODOs for validation of those calls.