Have the Linux USB drivers been patched for the recent vulnerabilities that have been found by Andrey Konovalov (Google)? If not what can be done to protect against these attacks other than avoiding use of USB devices?
You can check yourself. Choose a random CVE - I chose CVE-2017-16538. It states -
drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service...
Now have a look at that file history in the repository -
Aug 20, 2017 media: rc: rename RC_TYPE_* to RC_PROTO_* and RC_BIT_* to RC_PROTO_BIT_* Jun 24, 2017 media: dvb-usb-v2: lmedm04: remove unnecessary variable in lme2510_st…
So no - it doesn't look like that one has been fixed. As /u/Sonickyle27 showed many of them do have fixes but it looks like they haven't been accepted and merged yet.
Saying this there is technically the possibility distributions may have patched it themselves.