USB 'critically flawed' after bug discovery, researchers say (bbc.co.uk)

Seems like that would be more of an OS flaw than a USB flaw.