I update my previous post that you can find here: https://www.gabrielecaracciolo.com/linux-hardened-resources/
with a list of patches for the Linux Kernel that enhance its security:

SELinux

Linux Intrusion Detection

Exec-shield

Openswan – IPSec