The Canonical Livepatch Service is a commercial offering for Canonical. It applies kernel patches without downtime. It's also free for personal use (desktop or server).
disclaimer: I work at Canonical (but not for the livepatch team)
disclaimer: I work at Canonical (but not for the livepatch team)