Linux munmap() Race Condition / Use-After-Free

Linux munmap has a race condition with pagemapread that leads to a page use-after-free condition...