Vulnerable USB drivers exist in pretty much every OS. For example, here's a vulnerable USB driver under Linux: https://labs.mwrinfosecurity.com/system/assets/153/original/... , and a vulnerability in the FAT filesystem: http://people.canonical.com/~ubuntu-security/cve/2013/CVE-20... . Those were found with real simple googling, I could find others with a tiny bit more work. Unfortunately, most kernel development teams do not spend anywhere near the time they should ensuring that the code they write is hardened and modular, so such attacks will only continue until we demand better development hygiene.