DMA access on a guest OS are still virtualized since the hardware is virtualized. The hypervisor would trap and analyze the request and perform a duplicate-on-modify as needed.