OK thanks for the info. I thought it was hard because he was in some mode that required him to setup pagetables and service faults and all that.

So it's just hard because writing a decent malloc/free is involved, algorithmically.

Indeed, your method is a kind of malloc_roullette, depending on how much memory you allocate to the VM you run your kernel on.