Note, that you can also keep the userspace unchanged by hibernating and then choosing the new kernel on boot. It is not truly live patching, since you have still downtime, but pretty close.