diff --git a/src/boot/efi/meson.build b/src/boot/efi/meson.build
index fa61c3e9ce..823ef0de15 100644
--- a/src/boot/efi/meson.build
+++ b/src/boot/efi/meson.build
@@ -267,6 +267,7 @@ efi_ldflags = [
         '-Wl,--warn-common',
         '-Wl,-Bsymbolic',
         '-z', 'nocombreloc',
+        '-z', 'noexecstack',
         efi_crt0,
 ]