i use 'sudo apt-mark hold linux-generic linux-headers-generic linux-image-generic' to stop it updating.
then checkout the changelog for the new kernel to see if i need to update for security reasons.
https://changelogs.ubuntu.com/changelog ... n/l/linux/