A system and method for patching a kernel. The method includes receiving an online patch request, parsing a global kernel thread list to determine kernel threads associated with a target function, maintaining a storage data structure including identifiers of the determined kernel threads, and parsing the determined kernel threads using the identifiers in the storage data structure to determine when the global kernel thread list is free of the target function upon encountering an event associated with the target function.