Flash drives are not dumb. I know that Travis Goodspeed has had some success in reflashing their microcontrollers to speak corrupt USB to attack USB stacks of host machines (which of course run in kernel mode).
http://www.youtube.com/watch?v=D8Im0_KUEf8
Writing a Thumbdrive from Scratch: Prototyping Active Disk Anti-Forensics