I don't know when it will be implemented in stable. Only hidden services with a lot of people using them at the same time will have this naturally arise with no malicious party, although it is possible for an attacker to take steps to trigger the bug themselves.