In this case it should be fine because the second argument is a string literal (guaranteed to be null-terminated) and the function doesn't continue past the end of the first null-terminated string.

Would be a pretty neat exploit to buffer overflow someone's actual kernel via a carefully constructed module name, though.

A neat hack, yes...but probably not worthwhile from the perspective of an actual attacker (if you've got permissions to load a kernel module, you could just load one of your own crafting to do whatever nefarious things you wanted directly).

If you haven't validated or ensured that your string is a string you've already lost.