diff --git a/arch/arm64/kvm/hyp/nvhe/mem_protect.c b/arch/arm64/kvm/hyp/nvhe/mem_protect.c
index 06dfea39ca34..a916aa46842b 100644
--- a/arch/arm64/kvm/hyp/nvhe/mem_protect.c
+++ b/arch/arm64/kvm/hyp/nvhe/mem_protect.c
@@ -1834,6 +1834,7 @@ static int restrict_host_page_perms(u64 addr, kvm_pte_t pte, u32 level, enum kvm
 }
 
 #define MODULE_PROT_ALLOWLIST (KVM_PGTABLE_PROT_RWX |		\
+			       KVM_PGTABLE_PROT_DEVICE |	\
 			       KVM_PGTABLE_PROT_NORMAL_NC |	\
 			       KVM_PGTABLE_PROT_PXN |		\
 			       KVM_PGTABLE_PROT_UXN)