CVE-2026-45923: net: usb: catc: enable basic endpoint checking

In the Linux kernel, the following vulnerability has been resolved:

net: usb: catc: enable basic endpoint checking

catcprobe() fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors:

- usbsndbulkpipe(usbdev, 1) and usbrcvbulkpipe(usbdev, 1) for TX/RX - usbrcvintpipe(usbdev, 2) for interrupt status

A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes.

Add a catcusbep enum for endpoint numbers, replacing magic constants throughout. Add usbcheckbulkendpoints() and usbcheckintendpoints() calls after usbsetinterface() to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time.

Similar to - commit 90b7f2961798 ("net: usb: rtl8150: enable basic endpoint checking") which fixed the issue in rtl8150.