diff --git a/Kernel/VM/InodeVMObject.cpp b/Kernel/VM/InodeVMObject.cpp
index 29ef9c957a..9b76008aba 100644
--- a/Kernel/VM/InodeVMObject.cpp
+++ b/Kernel/VM/InodeVMObject.cpp
@@ -110,11 +110,11 @@ void VMObject::for_each_region(Callback callback)
 {
     // FIXME: Figure out a better data structure so we don't have to walk every single region every time an inode changes.
     //        Perhaps VMObject could have a Vector<Region*> with all of his mappers?
-    for (auto* region : MM.m_user_regions) {
+    for (auto* region = MM.m_user_regions.head(); region; region = region->next()) {
         if (&region->vmo() == this)
             callback(*region);
     }
-    for (auto* region : MM.m_kernel_regions) {
+    for (auto* region = MM.m_kernel_regions.head(); region; region = region->next()) {
         if (&region->vmo() == this)
             callback(*region);
     }
diff --git a/Kernel/VM/MemoryManager.cpp b/Kernel/VM/MemoryManager.cpp
index 143dd6c495..186ec08fbe 100644
--- a/Kernel/VM/MemoryManager.cpp
+++ b/Kernel/VM/MemoryManager.cpp
@@ -246,7 +246,7 @@ Region* MemoryManager::kernel_region_from_vaddr(VirtualAddress vaddr)
 {
     if (vaddr.get() < 0xc0000000)
         return nullptr;
-    for (auto& region : MM.m_kernel_regions) {
+    for (auto* region = MM.m_kernel_regions.head(); region; region = region->next()) {
         if (region->contains(vaddr))
             return region;
     }
@@ -766,9 +766,9 @@ void MemoryManager::register_region(Region& region)
 {
     InterruptDisabler disabler;
     if (region.vaddr().get() >= 0xc0000000)
-        m_kernel_regions.set(&region);
+        m_kernel_regions.append(&region);
     else
-        m_user_regions.set(&region);
+        m_user_regions.append(&region);
 }
 
 void MemoryManager::unregister_region(Region& region)
diff --git a/Kernel/VM/MemoryManager.h b/Kernel/VM/MemoryManager.h
index e36043bcc8..ab8f32c194 100644
--- a/Kernel/VM/MemoryManager.h
+++ b/Kernel/VM/MemoryManager.h
@@ -143,8 +143,8 @@ private:
     NonnullRefPtrVector<PhysicalRegion> m_user_physical_regions;
     NonnullRefPtrVector<PhysicalRegion> m_super_physical_regions;
 
-    HashTable<Region*> m_user_regions;
-    HashTable<Region*> m_kernel_regions;
+    InlineLinkedList<Region> m_user_regions;
+    InlineLinkedList<Region> m_kernel_regions;
 
     InlineLinkedList<VMObject> m_vmobjects;
 
diff --git a/Kernel/VM/Region.h b/Kernel/VM/Region.h
index 32a24f293a..32e02193fe 100644
--- a/Kernel/VM/Region.h
+++ b/Kernel/VM/Region.h
@@ -2,13 +2,15 @@
 
 #include <AK/AKString.h>
 #include <AK/Bitmap.h>
+#include <AK/InlineLinkedList.h>
 #include <Kernel/VM/PageDirectory.h>
 #include <Kernel/VM/RangeAllocator.h>
 
 class Inode;
 class VMObject;
 
-class Region : public RefCounted<Region> {
+class Region : public RefCounted<Region>
+    , public InlineLinkedListNode<Region> {
     friend class MemoryManager;
 
 public:
@@ -100,6 +102,10 @@ public:
             m_access &= ~Access::Write;
     }
 
+    // For InlineLinkedListNode
+    Region* m_next { nullptr };
+    Region* m_prev { nullptr };
+
 private:
     Region(const Range&, const String&, u8 access, bool cow = false);
     Region(const Range&, NonnullRefPtr<VMObject>, size_t offset_in_vmo, const String&, u8 access, bool cow = false);