In the meltdown official paper released the authors broke the KASLR with 128 steps at worse. Unable to understand how did they come down to that number
KASLR (Kernel Address Space Layout Randomization) is a technique for making it harder for an attacker to exploit a vulnerability that they've found. Instead of placing kernel data structures in predictable locations, they get scattered around at random, so an attacker needs to spend time looking for their target data before they can use it.
A 64-bit computer has 264 possible memory addresses. This is far more space than anyone can use right now, so to keep things simple, only a few of the addresses are made available -- for current CPUs, typically 240 addresses.
The number of "bits" of randomization is a measure of how many places there are that something could end up in. With 40 bits of randomization, that's 1,099,511,627,776 possible locations -- if the attacker is looking for a small piece of data such as the root password, they're probably not going to find it before the attack gets stopped.
In the case of Meltdown, though, the target is "a complete copy of physical RAM". This occupies a single continuous block that overlaps many of the possible locations that it could be placed at: in the case of 8 GB of RAM, the equivalent of 33 bits worth of locations. With 40 bits of available addresses, this leaves only 7 bits for randomizing the location. After at most 27 = 128 probes, the attack has found its target and can start reading memory.