RHEL is listing this as fix deferred for RHEL 8 and 9.

They've bumped the severity and 8/9/10 are now 'affected'. Hope a patch comes soon!