I would like to know, if assuming I attach an untrusted device (via usb port to my system), how much do I put my Linux system at risk?
In particular, I am worried that even though I would write
udev rules to block anything but (i.e. whitelist approach) a certain device, that the kernel would be vulnerable anyway?
Does udev have the capacity to prevent the kernel (assuming it is modular) from loading modules that would normally be loaded as a way to interact with an usb device?