The likes of Amazon can plug virtual USB devices into your VMs.
There are a million easier ways to break into a virtual machine running on a physical machine you control than finding an exploit and writing code to emulate malicious hardware. You can just modify memory directly.