With things like kpatch you can even update the kernel without a reboot