In addition to debian's unattended upgrades there's Ubuntu's live kernel update mechanism that adds kernel to the list of things that are up-to-date.