这句话不大理解，，vbox的

S_h.k

The heap is accessible from ring-3, ring-0 and the raw-mode context. That
* said, it's not necessarily mapped into ring-0 on if that's possible since we
* don't wish to waste kernel address space without a good reason.