Kernel fixing method and apparatus

The present invention discloses a kernel fixing method and apparatus. One specific embodiment of the method comprises loading a patch for fixing a to-be-fixed objective function in a kernel, wherein the patch is compiled by memory security language or memory security language subset of non-memory security language; executing the patch by using a memory security language engine; receiving and executing a call request for calling a fixing interface to fix the objective function during the patching process, wherein the fixing interface is provided by the memory security language engine and used for fixing the function; and executing the requested fixing interface to fix the objective function. Hot fixing and security of the kernel are achieved.