We use KernelCare to patch the kernel to the most recent version without the need of rebooting our nodes, therefore "uname" will still show the old version.
This is perfectly safe, please see this link for more details.