TLDR InfoSec · ATTACKS & VULNERABILITIES

BYPASSING USBGUARD ON LINUX

pulsesecurity.co.nz11 min read

Summary from the TLDR InfoSec newsletter

USBGuard on Linux can be bypassed when not configured with specific vendor and product IDs, allowing attackers to circumvent USB authorization policies. Attackers can present devices as innocuous HID or hub devices while actually being malicious by exploiting the kernel's matching process.