Er, DMA isn't controlled by the TLB using the usual page table for access permissions? If not, PCs are ridiculously broken.