You can check this free service offered by Ubuntu - up to 3 devices for free
https://ubuntu.com/tutorials/enable-the-livepatch-service#1-overview
"The Canonical Livepatch Service applies critical kernel security patches without rebooting Ubuntu. This is especially useful on production environments and services where any downtime could be disruptive."