USB Denial Of Service

From: Alan Stern
Date: Tue Jun 11 2024 - 10:42:42 EST


Greg, Oliver, or anyone else:

Questions:

If a broken or malicious device causes a USB class driver to add a
thousand (or more) error messages per second to the kernel log,
indefinitely, would that be considered a form of DOS?

Should the driver be fixed?

What is an acceptable rate for an unending stream of error messages?
Once a second? Once a minute?

At what point should the driver give up and stop trying to communicate
with the device?

(These are not moot questions. There are indeed drivers, and probably
not just in the USB subsystem, subject to this sort of behavior.)

Alan Stern