static ssize_t bb_show(struct md_rdev *rdev, char *page)
{
	return badblocks_show(&rdev->badblocks, page, 0);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.