CPL should be determined by code segment's DPL, not data segment's. This solves a problem migrating a QEMU guest without PV-on-HVM drivers Signed-off-by: Robert Plillips Signed-off-by: Ben Guthro