This talk presents practical research on fuzzing automotive infotainment systems through USB, with a specific focus on the Linux kernel USB stack running on real vehicle head units.

We demonstrate how the Linux USB Raw Gadget module can be leveraged to create malicious USB messages and perform kernel level fuzzing of USB drivers in automotive environments. By crafting malformed USB descriptors, control requests, and protocol edge cases, we trigger kernel crashes and unexpected behavior, exposing weaknesses in USB driver implementations used in infotainment systems.

The presentation includes proof-of-concept demonstrations and an analysis of the observed kernel failures.

This talk provides a hands on look at USB based attack surfaces in embedded Linux systems, highlighting practical methodologies for fuzzing the Linux USB kernel stack. Attendees will gain a deeper understanding of how malicious USB interactions can compromise system stability and security in modern vehicles and other embedded Linux platforms.