That doesn't seem to apply in this case. The vulnerability isn't masking the existence of the malware, it's only allowing its installer to run undetected (in so

That doesn't seem to apply in this case. The vulnerability isn't masking the existence of the malware, it's only allowing its installer to run undetected (in some cases). Once the installer has done its job, they're golden. The vulnerability can be patched, but since the malware was already installed, it doesn't help the victim.