Kernel doesn't seem to require W permissions to a page without UEFI so this had not been found earlier.