diff --git a/GNUmakefile b/GNUmakefile
index 416eacbf..980ab1c4 100755
--- a/GNUmakefile
+++ b/GNUmakefile
@@ -740,6 +740,7 @@ endif
 # Cryptogams AES for ARMv4 and above. We couple to ARMv7.
 ifeq ($(IS_ARM32),1)
 CRYPTOGAMS_AES_ARCH = -march=armv7-a
+CRYPTOGAMS_AES_ARCH += -Wa,--noexecstack
 SRCS += aes-armv4.S
 endif
 
diff --git a/GNUmakefile-cross b/GNUmakefile-cross
index 445c0100..c7c49070 100755
--- a/GNUmakefile-cross
+++ b/GNUmakefile-cross
@@ -328,6 +328,7 @@ INCL := $(filter-out resource.h,$(sort $(wildcard *.h)))
 # Cryptogams AES for ARMv4 and above. We couple to ARMv7.
 ifeq ($(IS_ARM32),1)
 CRYPTOGAMS_AES_ARCH = -march=armv7-a
+CRYPTOGAMS_AES_ARCH += -Wa,--noexecstack
 SRCS += aes-armv4.S
 endif