last_sync_action_show(struct mddev *mddev, char *page)
{
	return sprintf(page, "%s\n", mddev->last_sync_action);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.