I think it is likely that only the slow path (first packet of each flow) will move to userland. The fast path will still be handled in kernel.