A kernel extension associated with a first instance of an operating system can be detected. The kernel extension is configured to extend functionality of the kernel when loaded in a kernel managed by a second instance of the operating system. Some embodiments are further directed to detecting symbols for the kernel extension, where the symbols specify one or more functions associated with the kernel extension. Some embodiments are further directed to generating a first namespace that is assigned only to the first of the plurality of instances of the operating system. The first namespace is separate from a second namespace for the second of the plurality of the instances of the operating system. Some embodiments are further directed to storing the symbols in the first namespace.