Linux kernel vulnerabilities without distro notice: what this changes in my Ubuntu/Railway stack

Distros find out about kernel vulnerabilities at the same time as the public. I run on Railway over Ubuntu and this forced me to audit every layer of my stack. What I found isn't reassuring.