diff --git a/package/madwifi/patches/444-beacon_update_war.patch b/package/madwifi/patches/444-beacon_update_war.patch
new file mode 100644
index 00000000000..6a3178a6dba
--- /dev/null
+++ b/package/madwifi/patches/444-beacon_update_war.patch
@@ -0,0 +1,17 @@
+--- a/net80211/ieee80211_beacon.c
++++ b/net80211/ieee80211_beacon.c
+@@ -476,6 +476,14 @@ ieee80211_beacon_update(struct ieee80211
+ 			tie->tim_bitctl |= BITCTL_BUFD_MCAST;
+ 		else
+ 			tie->tim_bitctl &= ~BITCTL_BUFD_MCAST;
++
++		/* WAR: on some platforms, a race condition between beacon
++		 * contents update and beacon transmission leads to beacon
++		 * data not being updated in time. For most fields this is
++		 * not critical, but for powersave it is. Work around this
++		 * by always remapping the beacon when the TIM IE changes.
++		 */
++		len_changed = 1;
+ 	}
+ 
+ 	/* Whenever we want to switch to a new channel, we need to follow the
diff --git a/package/madwifi/patches/445-fix_ps_sta_count.patch b/package/madwifi/patches/445-fix_ps_sta_count.patch
new file mode 100644
index 00000000000..27514650a55
--- /dev/null
+++ b/package/madwifi/patches/445-fix_ps_sta_count.patch
@@ -0,0 +1,18 @@
+--- a/ath/if_ath.c
++++ b/ath/if_ath.c
+@@ -1957,6 +1957,7 @@ ath_uapsd_processtriggers(struct ath_sof
+ 				if (qwh->i_fc[1] & IEEE80211_FC1_PWR_MGT) {
+ 					ni->ni_flags |=
+ 						IEEE80211_NODE_UAPSD_TRIG;
++					ni->ni_vap->iv_ps_sta++;
+ 					ic->ic_uapsdmaxtriggers++;
+ 					WME_UAPSD_NODE_TRIGSEQINIT(ni);
+ 					DPRINTF(sc, ATH_DEBUG_UAPSD,
+@@ -1967,6 +1968,7 @@ ath_uapsd_processtriggers(struct ath_sof
+ 				} else {
+ 					ni->ni_flags &=
+ 						~IEEE80211_NODE_UAPSD_TRIG;
++					ni->ni_vap->iv_ps_sta--;
+ 					ic->ic_uapsdmaxtriggers--;
+ 					DPRINTF(sc, ATH_DEBUG_UAPSD,
+ 						"Node (" MAC_FMT ") no longer U-APSD"