static int get_ro(char *buffer, struct kernel_param *kp)
{
	return sprintf(buffer, "%d", start_readonly);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.