It's possible to map memory page of zero size causing memory corruption in kernel.
vulners.com/securityvulns/securityvulns:doc:5593
vulners.com/securityvulns/securityvulns:doc:5788
vulners.com/securityvulns/securityvulns:doc:5853