CVE-2011-0640: The default configuration of udev on Linux does not warn the user before enabling additional Human Interfac...

Security readout for executives and security teams

This CVE describes a physical, user-assisted risk on Linux systems: when a user plugs in a crafted USB device, Linux udev may enable extra keyboard or mouse functions without warning. That can let the device trigger program execution as if the user typed or clicked it. Exposure is most plausible on Linux desktops, laptops, kiosks, or admin workstations where users can attach untrusted USB devices. Server-only systems without physical USB access are less likely exposed. The bundle lists affected products and versions as n/a, so asset matching requires local distro and policy review. Prioritize this where physical device access intersects with privileged work: admin laptops, developer systems, shared workstations, and kiosks. It is not supported as actively exploited in the provided sources, but it can bypass user expectations because a USB device may act like trusted input. Mitigation focus: Check Linux distribution guidance for udev and USB HID policy controls.; Restrict untrusted USB device use on sensitive workstations and kiosks.; Use endpoint controls that block or require approval for new HID devices..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.