I understand that an md5 salt+password hash is vulnerable to brute force attacks due to how fast the md5 hash can be generated. Does locking users out after multiple failed login attempts do anything to address this vulnerability?

My assumption is that the lockout feature is irrelevant in terms of the md5 speed vulnerability. Moreover, I assume that one must first attain the password hash before attempting to break it using brute force.