Index: /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPAE.c
===================================================================
--- /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPAE.c	(revision 61392)
+++ /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPAE.c	(revision 61393)
@@ -73,4 +73,9 @@
             pPdPtr->a[3].u = pPdPtr->a[2].u + _4K;
 
+            /* Free up 8 consequtive entries for raw-mode hypervisor code. */
+            if (1) /** @todo detect raw-mode and only do this then. */
+                for (i = 0; i < 8; i++)
+                    paPgDirs->a[i + (UINT32_C(0xc0000000) >> X86_PD_PAE_SHIFT)].b.u1Present = 0;
+
             /* Set the global root pointer and we're done. */
             BS3_XPTR_SET(X86PDPT, XPtrPdPtr, pPdPtr);
Index: /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPP.c
===================================================================
--- /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPP.c	(revision 61392)
+++ /trunk/src/VBox/ValidationKit/bootsectors/bs3kit/bs3-cmn-PagingInitRootForPP.c	(revision 61393)
@@ -97,4 +97,9 @@
                 pPgDir->a[i].u |= X86_PDE4M_P | X86_PDE4M_RW | X86_PDE4M_US | X86_PDE4M_PS | X86_PDE4M_A | X86_PDE4M_D;
             }
+
+            /* Free up 4 consequtive entries for raw-mode hypervisor code. */
+            if (1) /** @todo detect raw-mode and only do this then. */
+                for (i = 0; i < 4; i++)
+                    pPgDir->a[i + (UINT32_C(0xc0000000) >> X86_PD_SHIFT)].b.u1Present = 0;
         }
         else