A kernel update fixes a driver issue and a custom nftables service still fails

A host kernel upgrade is followed by sporadic early boot network exposure or missing firewall enforcement until services settle.