I see folks recommending KernelCare, haven't seen directly (am not a provider) but witnessed admins cussing about KernelCare breaking.
Ksplice, was also recommended, I run the free version on my VPS instances. That does work good and haven't been slapped that I am aware of by that.
As-is...