static void rdev_free(struct kobject *ko)
{
	struct md_rdev *rdev = container_of(ko, struct md_rdev, kobj);
	kfree(rdev);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.