Have you got the timing right, Chris? Did you link to the right video? There's nothing around 31:00 that sounds remotely like your guess. At 31:00, the speaker says, 'Well... uh... kernel exploits usually have shellcode in userland memory and try to execute it there.'
****. Ok, now I've understood it. Well, this guy is from microsoft; he's responsible for security updates like the updates that were necessary after http://en.wikipedia.org/wiki/Stuxnet.