static void destroy_all_async(struct usb_dev_state *ps)
{
	destroy_async(ps, &ps->async_pending);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.