CVE-2026-23391 netfilter: xt_CT: drop pending enqueued packets on template removal