Nothing directly. But the CONFIG_WPS did set the NEED_SHA256 dependency in src/hostapd/Makefile (which CONFIG_IEEE80211W needs). Without CONFIG_WPS, this is no longer the case. But other options set it as well,
with any luck something else in the hostapd-full.config needs it too and sets it.
But If this error can really be traced to the the backports-4.14-rc2 patch, you could also try if installing the kmod-cmac module helps. (Note: the module will need to be loaded / (or you reboot the router). I know that mac80211 can request missing cipher modules at runtime and that this is working on a debian system with udev / systemd. But I haven't
verified that procd does it too ).