I have first-hand knowledge that this exploit is currently in use in the Middle East and is purchasable from at least one American corporation. It must be assumed that intelligence agencies have had this capability for the entirety of the GSM deployment.
Base station security is a separate matter. Why do you think A5/1 influences that?