CVE-2024-41097 is a vulnerability in the Linux kernel's usb atm cxacru driver caused by incomplete checking of USB endpoint types in the cxacru_bind() function. This flaw can lead to the use of incorrect endpoint types when submitting USB requests, triggering warnings in usb_submit_urb(). The issue has been fixed by verifying the presence of required endpoint types for both input and output, considering the command endpoint type. The patch has not been tested on real hardware. The vulnerability has a CVSS score of 5.5 and impacts availability but not confidentiality or integrity.