[legulere]

For a while you were actually able to mmap the memory at address NULL under linux, which is usable for exploiting (you can pass arbitrary data to kernel code that you can bring to dereference null pointers)

[orbifold]

Wouldn't virtual address translation prevent this from happening?