diff --git a/src/boot/efi/meson.build b/src/boot/efi/meson.build
index 380177449f4..6c1934d9f17 100644
--- a/src/boot/efi/meson.build
+++ b/src/boot/efi/meson.build
@@ -257,6 +257,7 @@ efi_ldflags = [
         '-Wl,--warn-common',
         '-Wl,-Bsymbolic',
         '-z', 'nocombreloc',
+        '-z', 'noexecstack',
         efi_crt0,
 ]