Comment by saidnooneever

it would be at a low enough level to reprogram IOMMU unless a hypervisor will prevent it.

if you have a hypervisor you can prevent the other to do the dma freely in memory because u can use iommu and things like amd-vi to separate it good. but if you dont have the hv below it, any devices with dma can do the duty across entire ram.