2.6.32.11+ with KERNEXEC and CPU's lacking NX capability