Whichever kernel debian bookworm has, the patch for this has most likely been applied to it. The larger risk is to organizations running ancient versions of RHEL or something that never get updated, e.g. because some hardware they need uses a shitty proprietary driver that supports only very specific kernel versions.