 The fast SYS* instructions only allow control transfers from ring 3 to 0 and vice versa.To preserve system security, the Global Descriptor Table must be held in protected memory, otherwise any program will be able to create its own call gate and use it to raise its privilege level.Call gates have been used in software security exploits, when ways have been found around this protection.