List Loaded Kernel Extensions with kextstat

See every loaded kext, its bundle ID, and linked state — the legacy way to spot third-party kernel drivers.

macOSkextstatkernellegacyLow risk

Run `kextstat` to list loaded kernel extensions; `kextstat | grep -v com.apple` shows only third-party ones.

01Command

Command

$ kextstat | grep -v com.apple

02What it does

kextstat prints the kernel's loaded-extension table: bundle ID, version, linked against, and memory address. Filtering out com.apple entries quickly reveals vendor drivers — the classic suspects in panics and sleep problems on Intel Macs. On modern macOS, system extensions (check `systemextensionsctl list`) and DriverKit have replaced most kernel extensions, so kextstat is mostly relevant to older systems.

03Risk

RiskLow risk

RequirementsIntel Macs or older macOS versions; on Apple Silicon, system extensions have largely replaced kexts.

!Warning: kextstat is unavailable or largely empty on Apple Silicon Macs — use `systemextensionsctl list` there instead.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

KEXTSTAT Command: Display the status of loaded kernel extensions in macOS
SS64 · technical · 2026-09-17
Evidence: Documents kextstat output columns and -b bundle-id filtering for loaded kexts.

Last verified: 2026-09-17 · Category: System & Settings