So this just got announced: https://www.ubuntu.com/server/livepatch
From this write up it sounds like a pretty clean implementation of kpatch: http://blog.dustinkirkland.com/2016/10/canonical-livepatch.html
Free for up to 3 machines beats any of the Suse, RHEL, or Oracle offerings. I've got it running, so far no changes, but hopefully there'll be an update for CVE-2016-5195 soon: sudo canonical-livepatch status --verbose machine-id: <snip> last-check: 2016-10-20T11:35:01.408858488+01:00 boot-time: 2016-10-20T11:28:11+01:00 uptime: 10h48m6s status: - kernel: 4.8.0-25.27-generic running: false livepatch: state: nothing-to-apply version: "" fixes: "" - kernel: 4.4.0-36.55-generic running: true livepatch: state: nothing-to-apply version: "" fixes: ""