Grab it from the Ubuntu kernel Mainline PPA http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.17.1/ Download the deb files and install them. “unsigned” means no Secure Boot support.