udevd listens for kernel uevents, and runs rules in /etc/udevd based on the events received.
It should always be running. This alert may still trigger on system shutdown/startup.
See https://www.kernel.org/pub/linux/utils/kernel/hotplug/udev/udevd.html