1. A method comprising: creating a soft whitelist having entries corresponding to each guest kernel page in a guest operating system (OS) in a hypervisor environment comprising a hypervisor; generating a page fault when an access attempt is made to a guest kernel page; fixing the page fault to allow access and execution if the guest kernel page corresponds to one of the entries in the soft whitelist; and denying execution if the guest kernel page does not correspond to any of the entries in the soft whitelist.