It has already been patched by some vendors, but you're right, if the IoT has given us anything, it's tonnes of unpatchable consumer gear.

I guess the question is whether only the AP needs to be patched or the client as well.

In fact it is only clients that need patching. However, sometimes AP's are also clients. Disable any such features if you have them and are not depending on them.