AWS Security Center is always the place to go for information on vulnerabilities like this
Kubernetes ons is here: https://aws.amazon.com/security/security-bulletins/AWS-2018-020/
TL;DR - Yes vulnerable as all Kubernetes clusters are. But also yes - patched