Once the commit is in the kernel tree it's effectively public for those looking to exploit it. Combing recent commits for bug fixes for the platform you're targeting is exploitation 101.

The announcement only serves to let the rest of the public know about this and incentivize them to upgrade.