What if a process could “mov cr3, 0xcafebabe” ?

Note not written yet — to be added.