(removed previous post since got more info)
We had this patched early, appears likely around mid-December. We also have features like USB-C port control that makes exploiting the kernel USB drivers harder, that feature was actually meant for it.
We posted a thread earlier elsewhere about it, I just cross posted to Nostr now.