static void vmci_transport_release_pending(struct sock *pending)
{
	sock_put(pending);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.