1. A method, comprising: creating a soft whitelist having an entry corresponding to a first guest kernel page in a guest operating system (OS) in a hypervisor environment comprising a hypervisor; generating a page fault when an access attempt is made to a second guest kernel page; fixing the page fault to allow an execution if the second guest kernel page corresponds to the entry in the soft whitelist; and denying the execution if the second guest kernel page does not correspond to the entry in the soft whitelist and the page fault is an instruction page fault.