There are no restrictions on the OS patches that you can apply to the Linux machine. The only requirement is that the machine be running one of the supported Linux operating systems listed in the Install Guide under the section 'Operating System Support for Server'. 

In the interest of prudence, it is preferable that you install the patches on a test/UAT machine first. The reason is that there is no  guarantee that a kernel patch will not introduce its own bug that could affect the working of the Java Virtual Machine in which TDV runs.