In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92051.json"