Display status of loaded kernel extensions (kexts).

      kextstat [-a] [-h] [-k] [-l] [-b identifier] ...

   -a, -arch
               Print the architecture of the kext.

   -b identifier, -bundle-id identifier
               Display the status of only the kext with the given bundle iden-
               tifier.  This option trumps the -no-kernel option; if both are
               given and a kernel component is specified, its information is

   -h, -help
               Print a help message describing each option flag and exit with
               a success result, regardless of any other options on the com-
               mand line.

   -k, -no-kernel
               Don't show information for built-in components of the kernel.

   -l, -list-only
               Print the list of loaded kexts only and omit the header (useful
               for running output through text-analysis tools).

   -s, -sort
               Sort the list by load address.

The kextstat utility displays the status of any kexts currently loaded in the kernel.
The following information is shown for each loaded kext:

     Index     The load index of the kext (used to track linkage references).
               Gaps in the list indicate kexts that have been unloaded.

     Refs      The number of references to this kext by others.  If nonzero,
               the kext cannot be unloaded.

     Address   The address in kernel space where the kext has been loaded.

     Size      The number of bytes of kernel memory that the kext occupies.
               If this is zero, the kext is a built-in part of the kernel that
               has a record as a kext for resolving dependencies among kexts.

     Wired     The number of wired bytes of kernel memory that the kext occu-

     Architecture (if the -a option is used)
               The architecture of the kext.

     Name      The CFBundleIdentifier of the kext.

               The CFBundleVersion of the kext.

     Linked Against
               The index numbers of all other kexts that this kext has a ref-
               erence to.

When troubleshooting a Mac, it can be helpful to list the active kernel extensions, particularly third party kexts.

The kextstat utility exits with a status of 0 on success and with a nonzero status if an error occurs.


List only third party kernel extensions:
$ kextstat | grep -v

"The wheel is an extension of the foot, the book is an extension of the eye; clothing, an extension of the skin, electric circuitry, an extension of the central nervous system” ~ Marshall McLuhan

Related macOS commands

kextfind - List kernel extensions.
kextunload - Terminate driver instances and unload kernel extensions.
find - Search for files that meet a desired criteria.
xargs - Execute utility - passing arguments.

Copyright © 1999-2024
Some rights reserved