On Thu, Sep 30, 2021 at 10:43:05AM -0400, Alan Stern wrote:

I don't see any point in talking about "untrusted drivers".  If a 
driver isn't trusted then it doesn't belong in your kernel.  Period.  
When you load a driver into your kernel, you are implicitly trusting 
it (aside from limitations imposed by security modules).

Trusting it to do what? Historically a ton of drivers did not
validate input from devices they drive. Most still don't.

The code 
it contains, the module_init code in particular, runs with full 
superuser permissions.

-- 
MST