unsigned char lnext:1, erasing:1, raw:1, real_raw:1, icanon:1;
 
        /* shared by producer and consumer */
-       char *read_buf;
+       char read_buf[N_TTY_BUF_SIZE];
        DECLARE_BITMAP(read_flags, N_TTY_BUF_SIZE);
-       unsigned char *echo_buf;
+       unsigned char echo_buf[N_TTY_BUF_SIZE];
 
        int minimum_to_wake;
 
        if (tty->link)
                n_tty_packet_mode_flush(tty);
 
-       kfree(ldata->read_buf);
-       kfree(ldata->echo_buf);
-       kfree(ldata);
+       vfree(ldata);
        tty->disc_data = NULL;
 }
 
 {
        struct n_tty_data *ldata;
 
-       ldata = kzalloc(sizeof(*ldata), GFP_KERNEL);
+       /* Currently a malloc failure here can panic */
+       ldata = vmalloc(sizeof(*ldata));
        if (!ldata)
                goto err;
 
        mutex_init(&ldata->atomic_read_lock);
        mutex_init(&ldata->output_lock);
 
-       /* These are ugly. Currently a malloc failure here can panic */
-       ldata->read_buf = kzalloc(N_TTY_BUF_SIZE, GFP_KERNEL);
-       ldata->echo_buf = kzalloc(N_TTY_BUF_SIZE, GFP_KERNEL);
-       if (!ldata->read_buf || !ldata->echo_buf)
-               goto err_free_bufs;
-
        tty->disc_data = ldata;
        reset_buffer_flags(tty->disc_data);
        ldata->column = 0;
+       ldata->canon_column = 0;
        ldata->minimum_to_wake = 1;
+       ldata->num_overrun = 0;
+       ldata->no_room = 0;
+       ldata->lnext = 0;
        tty->closing = 0;
        /* indicate buffer work may resume */
        clear_bit(TTY_LDISC_HALTED, &tty->flags);
        tty_unthrottle(tty);
 
        return 0;
-err_free_bufs:
-       kfree(ldata->read_buf);
-       kfree(ldata->echo_buf);
-       kfree(ldata);
 err:
        return -ENOMEM;
 }