static void skcipher_release(void *private)
{
	crypto_free_ablkcipher(private);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.