The hypervisor needs to intercept the mode check, either by using VT or by code translation. It can tell the guest operating system that it running in kernel mode.