Other than apparently commonly assumed, the bound instruction does not require the corresponding IDT entry to have DPL 3. From: Jan Beulich (actual patch attached)