mrp: introduce active flags to prevent UAF when applicant uninit

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2022-50697 · Microsoft / collected KEV context

cve-program · CVE-2022-50697

• https://git.kernel.org/stable/c/98f53e591940e4c3818be358c5dc684d5b30cb56
• https://git.kernel.org/stable/c/aacffc1a8dbf67c5463cb4f67b37143c01ca6fa9
• https://git.kernel.org/stable/c/78d48bc41f7726113c9f114268d3ab11212814da
• https://git.kernel.org/stable/c/aadb1507a77b060c529edfeaf67f803e31461f24
• https://git.kernel.org/stable/c/755eb0879224ffc2a43de724554aeaf0e51e5a64
• https://git.kernel.org/stable/c/5d5a481a7fd0234f617535dc464ea010804a1129
• https://git.kernel.org/stable/c/1a185fe83c2a60c1e3596fb9d82dbeb148dc09c6
• https://git.kernel.org/stable/c/563e45fd5046045cc194af3ba17f5423e1c98170
• https://git.kernel.org/stable/c/ab0377803dafc58f1e22296708c1c28e309414d6

No related operational record is retained in the current change model.