Just to clarify, because the FragAttacks report is really that complex and complicated. The report contains 12 distinct vulnerabilities and some are targeted at APs, some are at clients, and some are at both. To prevent all 12 CVE's contained in the report, both APs and client devices need to be patched. Patching just the APs will prevent some of the vulnerabilities, but not all of them. It will, however, reduce the attack vectors available, especially with older client devices that might not get patched thanks to a lot of different factors.
For those critical networks, refer to this page from the support site for additional help https://www.commscope.com/fragattacks-commscope-ruckus-resource-center/wifi-fragattacks-what-you-nee...
For those who want to get even more into the attacks, you can also check out this post-https://jimswirelessworld.wordpress.com/2021/05/11/fragattacks-just-reinforces-the-it-depends-complexity-of-wi-fi/
