After some research I discovered that linux has IPv6 Stateful firewalling since 2.6.15. But the code won’t be usable until at least 2.6.20 because it doesn’t play nice with IPv4 NAT.
Initial Patches are available on the netfilter mailinglists, let’s hope they make 2.6.20.