There is a new pull request by Hoshpak against master on the void-packages repository

https://github.com/Hoshpak/void-packages linux4.14.127
https://github.com/void-linux/void-packages/pull/12523

linux4.14: update to 4.14.127.
[skip ci]
CVE-2019-11479
CVE-2019-11478
CVE-2019-11477

A patch file from https://github.com/void-linux/void-packages/pull/12523.patch is attached