Are Kernel Panics an expected behavior of the Network Extension framework?

I've observed at least 3 kernel panics in Apple code on Catalina and Big Sur related to Network Extensions.

I'm a bit surprised and disappointed. Network Extensions were allegedly created because we, mere 3rd party developers, are not worthy to work in Kernel land. And by using Network Extensions, we will avoid causing kernel panics.

Well, it looks like that using Network Extensions does not prevent Kernel Panics.

So 2 questions:
  • is it recommended not to use Network Extensions until the switch to Apple Processor based Macs?

  • Why all the scary alerts about Kernel Extensions when Network Extensions can KP a Mac?


Are Kernel Panics an expected behavior of the Network Extension
framework?

No. All non-KEXT kernel panics are automatically bugworthy.

This is one of the key advantages of working outside of the kernel. When you develop a KEXT you have to work hard to prove that a kernel panic was Apple’s fault. If you don’t have a KEXT then a kernel panic is always Apple’s fault.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Are Kernel Panics an expected behavior of the Network Extension framework?
 
 
Q