Update Centos without upgrading kernel or OS

I tried to find answers to this issue but I am having a hard time to find the right keywords. So here is my issue. Dongled mini PC with some itchy software when it comes to patching the system. Is it possible to get updates only for a specific release and kernel version even if a newer OS is available? I have CentOS 7.5 18.04 running here and have been told that system will be upgraded automatically if a newer OS is available. Security patches for "older" OS are only available as RedHat for paying users. Is it possible to upgrade to the latest and greatest (security) mitigating a leap to newer versions?