static void __hidp_link_session(struct hidp_session *session)
{
	list_add(&session->list, &hidp_session_list);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.