The new hh() in volshell shows some details on how to reach different address spaces:
>>> hh()
Use self.addrspace for Kernel/Virtual AS
Use self.addrspace.base for Physical AS
Use self.proc to get the current _EPROCESS object
and self.proc.get_process_address_space() for the current process AS
and self.proc.get_load_modules() for the current process DLLs
So if you want to translate an address using a kernel DTB:
>>> self.addrspace.vtop(address)
If you wanted to translate an address using a specific process's DTB:
>>> cc(pid = XXX)
>>> self.proc.get_process_address_space().vtop(address)
MHL