Live kernel patches for Ubuntu
Canonical has announced the availability of a live kernel patch service for
the 16.04 LTS release.
"It’s the best way to ensure
that machines are safe at the kernel level, while guaranteeing uptime,
especially for container hosts where a single machine may be running
thousands of different workloads."

Up to three systems can be patched for free; the
service requires a fee thereafter. There is a long FAQ about the service
in this
blog post; it appears to be based on the mainline live-patching
functionality with some Canonical add-ons.