I was looking at this this morning. Try reverting the following patch.
See also:
http://bugzilla.kernel.org/show_bug.cgi?id=13362
commit 7e0986c17f695952ce5d61ed793ce048ba90a661
Author: Johannes Berg <johannes@sipsolutions.net>
Date: Sun Apr 19 13:22:11 2009 +0200
mac80211: fix basic rate bitmap calculation
"mac80211: fix basic rates setting from association response"
introduced a copy/paste error.
Unfortunately, this not just leads to wrong data being passed
to the driver but is remotely exploitable for some hardware or
driver combinations.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Cc:
stable@kernel.org [2.6.29]
Signed-off-by: John W. Linville <linville@tuxdriver.com>