Supposedly, it's already done. It affects all Snapdragon phones, including the Note 3.
However... they go on to say that the exploit was released over a month ago... and some phones are already patched.
DroidLife seems to be somewhat detached from the root community, though, since they assume that "already patched" means that everyone that owns the phone has installed the OTA. I'm on NC2, and I updated from MI9. I hope that NC2 is still vulnerable. MI9 was the initial release.
As an aside... I'm not sure if I particularly care about unlocking my bootloader. Installing AOSP roms doesn't appeal much to me, since the developer edition (for instance) has been out for a long time... and the best they can do with the S-Pen is to emulate a mouse input. Maybe modded kernels would hold more interesting possibilities... but even when I had my S3 I didn't mess with the kernel that often.