Intel processors have a feature called Supervisor Mode Execution Prevention (SMEP) designed specifically to prevent that in most cases (because there's a decent chance the code might be attacker-controlled). It's totally optional, of course.

https://lwn.net/Articles/517475/