just got the 5.9.0-5-amd64 kernel and tested -- it is also susceptible and can be triggered by the method described in my earlier email/post.
--
.this message has been rot26 encrypted for security reasons.
gpg 0x385E2954CE572CADE8C091C09479B105A6770473