diff --git a/xen/Makefile b/xen/Makefile
index 0c22f36adf..85358930a8 100644
--- a/xen/Makefile
+++ b/xen/Makefile
@@ -221,6 +221,8 @@ endif
 
 AFLAGS += -D__ASSEMBLY__
 
+$(call cc-option-add,AFLAGS,CC,-Wa$(comma)--noexecstack)
+
 LDFLAGS-$(call ld-option,--warn-rwx-segments) += --no-warn-rwx-segments
 
 CFLAGS += $(CFLAGS-y)