Looks like this only happens when CONFIG_PARAVIRT is set; and all 2.6.25 patches are affected.
PaX modifies include/asm-x86/desc.h and removes this line:
extern struct desc_ptr cpu_gdt_descr[];
I had a look through the xen paravirt_ops patches and don't see cpu_gdt_descr used anywhere specifically - think you should remove the symbol export in the ksyms since you remove it anyway?
--- a/arch/x86/kernel/x8664_ksyms_64.c 2008-06-13 10:50:12.000000000 -0400
+++ b/arch/x86/kernel/x8664_ksyms_64.c 2008-06-13 10:50:17.000000000 -0400
@@ -54,8 +54,3 @@
EXPORT_SYMBOL(load_gs_index);
EXPORT_SYMBOL(_proxy_pda);
-
-#ifdef CONFIG_PARAVIRT
-/* Virtualized guests may want to use it */
-EXPORT_SYMBOL_GPL(cpu_gdt_descr);
-#endif
I know that it may not be talking specifically about xen paravirt here - but removing these few lines in the 2.6.25-xen kernel from fedora doesn't appear to break anything.
This appears to be the only build issue on 64bit with 2.6.25... I'll run some tests and post back when I'm done.