Isn’t it a better idea to delete the vulnerable module for the current kernel version? That way you don’t leave any configuration behind to clean up again after you have upgraded to a secure kernel version.