Refuse kernel update (not version specific)

After accepting a kernel update on machines here in the shop, two of them will not boot, so I would like to NOT update remote machines where we do not have console access.

Can’t find anything on point, … so how does one REFUSE the kernel update proposed by zypper up [while accepting the rest]?