diff --git a/sys-kernel/gentoo-kernel-bin/Manifest b/sys-kernel/gentoo-kernel-bin/Manifest
index 5d69b1560bed..dd5307f9cec6 100644
--- a/sys-kernel/gentoo-kernel-bin/Manifest
+++ b/sys-kernel/gentoo-kernel-bin/Manifest
@@ -54,6 +54,10 @@ DIST gentoo-kernel-6.17.12-1.amd64.gpkg.tar 336988160 BLAKE2B 212dd2167d0c3dccc7
 DIST gentoo-kernel-6.17.12-1.arm64.gpkg.tar 297687040 BLAKE2B 50d2d2602ecaefb2090b56266947759ab9e07707b38fc4255309d0062d95862e520577ed80cc3ac353e3a605dd164af227a4af5a837e9f52983394da692584fd SHA512 8e0aeb1676592348d788a57d24f698f8e1edb5bc55a3337f6790e5d3767b9a20003d31334b089df0d39ac4a2c3d95653e9dec5a47e9628572df6ac6b81cddcf6
 DIST gentoo-kernel-6.17.12-1.ppc64le.gpkg.tar 75591680 BLAKE2B db7e86289642748803e2b74a942dc89a5f5e582ed91c4440b52e3f5fb10bf2dae110e594a99ecba63bb2f6e185942e1019a7d937d78e21ca4979dfee7bfedc74 SHA512 c91f483b5eb516f5295930011e0b05b02a37d84617b91f4d6db0f958947ba4ed88c8db95a09890addce35ce33ed8498dac71afee93151568451c4a0f259f6cb7
 DIST gentoo-kernel-6.17.12-1.x86.gpkg.tar 83404800 BLAKE2B 4bcd097bc2118111b08f7972bd27eace2dac6ec1dcf48cb80f432f44aa3b588249693448f92fbb4eabcd09d35c547502eb0d989a101a9f1165a036353e88f7a4 SHA512 84eab612eeac2315296165c91f92701a0558ce262d58fcc6c75144cf8ebadf9a8831479f88c8f1f149ed89c36f952b9ed34f36eaae37bd6ed13f3615092b02fd
+DIST gentoo-kernel-6.17.13-1.amd64.gpkg.tar 338032640 BLAKE2B 978ff7fe53fc34958c9f64d0fe628638f01b70293c9096c3ac10089e8e4a2b73610a3f307f6bdfa4222659f98619d7e94602bb2a0471f95d7d4435b1b357033e SHA512 fd4139f54c4b7f7e15ed784ee539f23f6cb75b89956725728a757f6a40fb06fa112a0b72a8bcbb5bf146b2a8b411aa54c6e362d9fb5147e1258486574c109303
+DIST gentoo-kernel-6.17.13-1.arm64.gpkg.tar 297482240 BLAKE2B 5928b7c15995d2c24f76e6ab337f837ec721719e4c9f2a9867de6e1bd392cbbe61bd6505ad3545cd8dbde27c33676f18f9591f538f67e0b79fb63344508f412e SHA512 0648718d24976ce65ed0f3a8251611ee20f7404650ee0e5ce436dd34aa8d51c18167f0b8f26e95108195bac2620e2c8dc1f5662016ab0c8ac80f940d12005e21
+DIST gentoo-kernel-6.17.13-1.ppc64le.gpkg.tar 77342720 BLAKE2B 695fa37978c7f2d545577ba6a5262d3ab8d3e5c1e97eba88a2d8fde4ce2a1b75e858f62360e1fabbe1e212295e091b880075b65da51fb1c36a0bd58b1c72e86c SHA512 ecbdf17be8073efd1d5dced932ceeb570816145294a7df1e3645310c1e5f5ff29405f29dd3512d1b3f2e3efd811ce2882eadb421a1978a22290752f38ffb9722
+DIST gentoo-kernel-6.17.13-1.x86.gpkg.tar 83630080 BLAKE2B f45fd714b25a7ca6dab0a230223e407d726b140edd4b448415a5730fef814cd688c63bc8b4a6c54b02ac127e959a0fcfa5ed6df9a9ac9d803a3509530afdcea2 SHA512 968fa60b90445fe028928f88e2dff66ec3d6deb9883fca8f5417f7c5f04901a37edba966a5222d3cb18d1d98be3e7263cfdee6bfd943afa52d750d278dec92b9
 DIST gentoo-kernel-6.17.9-1.amd64.gpkg.tar 336824320 BLAKE2B 93775e73c2dbfb5f6a6a0198f07dc80212624247853fb3a11169346818162820f3c7cef79aa550354bde0bac14ac0b612e0c3445dc897bcafde27df48130d7b9 SHA512 1dfea1091578eeec4bc518e01bb863a53b23098f2cbd85eb63a9a1b6a95ba629ad282f827e3a44fa8f63d9026abc3ba9e00b235e94a3d197885c618bbab7d820
 DIST gentoo-kernel-6.17.9-1.arm64.gpkg.tar 297553920 BLAKE2B 3a5e33d6fcff2b7b8284cff550a4a4b1db92f432ef0777646c8310e9750c1485a90082ca47ce837a3712812e8873468a31088193244b14e73f3a7431cda07b8a SHA512 89f8da0265d42c4178c0dad4c032c079c557ee0baf3c1fc5e446a794861f6a754eb7df33b2aee4bae175f8b0f782e5f86fe840086a06cc803b7fa152293c762d
 DIST gentoo-kernel-6.17.9-1.ppc64le.gpkg.tar 75560960 BLAKE2B bdc9bd97291455f601dec9a5740387720600cbd327bc7e94e7ccc0daa6197d626bb6fcd7e6beac76a3aa126d9f50014730585d3602d84a10288d13aeb74c8366 SHA512 9f314b4a6f2ea024c9501da21bd13c664534565946b74f3544cba512445f2e7f3c8de79dc949d0010071c00d8b3d09de94d13485261d585112764a0af199f5a4
@@ -107,6 +111,7 @@ DIST linux-gentoo-patches-6.12.52.tar.xz 21836 BLAKE2B 7b39c3a97fdcfe76e12f2e481
 DIST linux-gentoo-patches-6.12.62.tar.xz 23544 BLAKE2B f67dcd9b5d60b9e4236b9a8d781206ea7e500e8bd468ccbeee9317329fe3ca8955a75be63d0e2629715ad8353d975ce75789e3009dcea36dad381eb53ce57c97 SHA512 357eac8b1aa89cbcf746dd72cf222d80132b05b17b1de4ee3d15220b9a0038e51de12efbd90b5edd019a3fa996c05382a718fad674afc603512d209f315500d9
 DIST linux-gentoo-patches-6.17.10.tar.xz 86940 BLAKE2B 29eb529f3757a9c3f085674f8c6f2e71ad3df5c95f43cda5a3b9f1389941fa5fe47728b71b8bf5d24451ecd9ba2967e354a60f8248e2f5a6d9b3fb1c013d7bed SHA512 5bd964697e067280061cdf9069e48748f93df9a17349a8f259c25abfc6274fa696dc8457d4aac2b4a03e1c70de66b2378fa4e126d2eb12fd2515dae7360cf809
 DIST linux-gentoo-patches-6.17.12.tar.xz 88612 BLAKE2B 49e1198449905f05653a7f450642abfe063dc8ab152c98fef327e3a507f42e30250201f2f6a9b4c41cef8ee32865246fe2a58a4551474ac43e1d102c5c82f61d SHA512 3b8e59ed698cca14c3f4a8f5f1e172db3ca405fbde1424bc1854d7c8b7cea2b95123b211dbe596140f80095fbdd54650e88c3a4c2fae6504c3e5ade2d8c88571
+DIST linux-gentoo-patches-6.17.13.tar.xz 86188 BLAKE2B d146fa4c14321f0b3841e1914a521cec57e4259e1c9f81b7e02237c97255b9639c6f6ab4d87434a7223b47841b914ee270e948902c27d135f94311090fb17fa7 SHA512 6491195b60e33781c556540cdbb1b1c803c819a9afd0bf5ed4f373f543ee8325a0508522329bcf11b474f9432d7cdc89917af476fa113906a41140a6281dab86
 DIST linux-gentoo-patches-6.17.2.tar.xz 99184 BLAKE2B 867bbf3a8cce987dba3381a874985e614187649e5341bc8c43f97e0b501ed4cfc4bce2ee7d8114ce54d75605151c7dbfdea51e9e5da7af3a834b169bb6998eb1 SHA512 149946fd38c22ef5a8b198011f4a044d3c00a93635f85b3c0d0f1f4d74faead20355acf3ff0ee55df89361fd48e8270219f52feeae0688b92d090a1c59a20ba8
 DIST linux-gentoo-patches-6.18.1.tar.xz 14304 BLAKE2B e9bc17c8a9bc7334017f61738ce0b5d17d6b9a770927f3e3f848b9a10f5efad1ad6ec0e9697e5ceb844d0f625299794b7d31d3fe09e0854ab4c98235be637d8a SHA512 00db6b73624f953f0c2f18095556bd3045f1b08603ce5ede971767c4f161758d79b049304826dd765bb44f46345ff44b3c17d9e0d83616349599fe75ac38e714
 DIST linux-gentoo-patches-6.18.2.tar.xz 11656 BLAKE2B ebac8222e1a9f94753d45bddc35fcfde7a1f66b19307cf64a9e3ab47fe12f35b70e65d1cab48a85741ee6bf6c2bd92e05e0587f9903ab3a1535bc9168b819dd8 SHA512 1548015f42cdc55927a3c42b37cde1871f88adcdd0bd04f53fefabc5dee5cf22bb6a3f188200efc2c4ccd484906c2642cdd30ab9ba2ffe524afdbd17cdc5fa09
@@ -125,6 +130,7 @@ DIST patch-6.12.62.xz 3513124 BLAKE2B 26859581d5f20c3e06fb97677919fc8ca3038309cd
 DIST patch-6.17.10.xz 806232 BLAKE2B 49252accd7f37554a2783cfa92523dad3e39f41764e0aa6b07daf312463f73abdd8a5fd83062bb90c28dfcfbc06d11a34eb746d09f08895dc2b786393a5b47f9 SHA512 801f3371149ebf80ee125e4264ec262fbe9b90b703a77bc56a90740bc3d00c792fcd6675a7bf26fd881939f1e2e0e1cc66518c18ec0c1091133089bb7ed5bce8
 DIST patch-6.17.11.xz 844648 BLAKE2B 4adf688aadee196cd4afe94eb05d9e98b0e844d7ee4148c25bed76a47b1c06f665dc9587cc5f7f4f340fac1d0ebac32ee8cacdc0eca9c2850ccce670d9cb00a3 SHA512 dba734bb5b76ee7fb829b299f65efd9575b01a1dbf2e172a50f7d42ecdc75adfa6c99f66b2bfda68b889d6565591d2b01af5fd236abc6e2313baa9f47c7f5208
 DIST patch-6.17.12.xz 859216 BLAKE2B 7e3aa001352bcc0369d52cdba5bafab2d72662cdab7fea9f00813cde83aba7dcb45cc8c60c758f47a48a65c2611e054d8d0cbadf607413a338de1f22c9e567bb SHA512 44df56479fc1dbdbb47a633faade3d301c5c6f3fdfbe757480a0f11f8614070257e821cee674205563dbbed2aaa96898da3408492f833bd7d1adc968a03e2776
+DIST patch-6.17.13.xz 993300 BLAKE2B 368ed14af870d06af317a28b1e2ca5ae32fce924621a325791b4ccccedd12504150af2b24e0475dc8b9e408afe5aa49dde325270f342220ca40a39ad18a5f93f SHA512 dccfbc4e5f35936c14d3a7b035f16c76b1b80d07827ce148fe12f42313b9a407e2df14d0b1593be776cb0910805f8721b42075d09e9960566eb836f537f43d74
 DIST patch-6.17.9.xz 764968 BLAKE2B a0ce8311be7c251ad21b7cc11be4f30ec5125e3763f97a750afef855be385a3ceae24df3b65b5dd751729575aa0cd254a95cbae0f2e8cc8f95539dcfa2d9d3a1 SHA512 35593bc973cc7f626aa7a41cf8b7dea1b46fe8922bd57194db363d26e8854af514d103e39d02c642c26748bd933d5e402ff89d2a20d2da5f8d901e4713eafc46
 DIST patch-6.18.1.xz 15784 BLAKE2B fe7857feeeacdbad91db8330d74a2bfd53d35783e8c37366bf76d2d4c6e7d38a83c3923a950500d5a2f758141a24bd6c248e723130db7c04293d3a07cddef5ce SHA512 09ed1dc6b66ee15921167de612a9e5178d37dfc874731b2893a833acaaddaf929e900ba9366d3aecfd678b67a28d3889f897735c6305c2b4af87a101a84ea775
 DIST patch-6.18.2.xz 203656 BLAKE2B 58ee88f8a912a4574bacea12016213602790949224f10b75a823ce1b2977640e4d1f96182367f399b66e1a423cb94c1314e9b6ea405ccb4043b7beb28880c174 SHA512 243c839c47bcb222d48ebebee3d318d5c17b5ad12d9a1df0aedcda7bb5262c4765b43ac3df82e8c0787a7b8242f51b2dd3227e5e07949eb644255a3b9e90a20d
diff --git a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.13.ebuild b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.13.ebuild
new file mode 100644
index 000000000000..7d831ce5f27d
--- /dev/null
+++ b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.13.ebuild
@@ -0,0 +1,237 @@
+# Copyright 2020-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KERNEL_IUSE_GENERIC_UKI=1
+KERNEL_IUSE_MODULES_SIGN=1
+
+inherit kernel-install toolchain-funcs unpacker verify-sig
+
+BASE_P=linux-${PV%.*}
+PATCH_PV=${PV%_p*}
+PATCHSET=linux-gentoo-patches-6.17.13
+BINPKG=${P/-bin}-1
+SHA256SUM_DATE=20251218
+
+DESCRIPTION="Pre-built Linux kernel with Gentoo patches"
+HOMEPAGE="
+	https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+	https://www.kernel.org/
+"
+SRC_URI+="
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PATCH_PV}.xz
+	https://dev.gentoo.org/~mgorny/dist/linux/${PATCHSET}.tar.xz
+	verify-sig? (
+		https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
+			-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
+	)
+	amd64? (
+		https://dev.gentoo.org/~mgorny/binpkg/amd64/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar
+			-> ${BINPKG}.amd64.gpkg.tar
+	)
+	arm64? (
+		https://dev.gentoo.org/~mgorny/binpkg/arm64/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar
+			-> ${BINPKG}.arm64.gpkg.tar
+	)
+	ppc64? (
+		https://dev.gentoo.org/~mgorny/binpkg/ppc64le/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar
+			-> ${BINPKG}.ppc64le.gpkg.tar
+	)
+	x86? (
+		https://dev.gentoo.org/~mgorny/binpkg/x86/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar
+			-> ${BINPKG}.x86.gpkg.tar
+	)
+"
+S=${WORKDIR}
+
+KEYWORDS="~amd64 ~arm64 ~ppc64 ~x86"
+IUSE="debug"
+
+RDEPEND="
+	!sys-kernel/gentoo-kernel:${SLOT}
+"
+PDEPEND="
+	>=virtual/dist-kernel-${PATCH_PV}
+"
+BDEPEND="
+	app-alternatives/bc
+	app-alternatives/lex
+	dev-util/pahole
+	virtual/libelf
+	app-alternatives/yacc
+	amd64? ( app-crypt/sbsigntools )
+	arm64? ( app-crypt/sbsigntools )
+	verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
+"
+
+KV_LOCALVERSION='-gentoo-dist'
+KV_FULL=${PV/_p/-p}${KV_LOCALVERSION}
+
+QA_PREBUILT='*'
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
+
+src_unpack() {
+	if use verify-sig; then
+		cd "${DISTDIR}" || die
+		verify-sig_verify_signed_checksums \
+			"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
+			sha256 "${BASE_P}.tar.xz patch-${PATCH_PV}.xz"
+		cd "${WORKDIR}" || die
+	fi
+
+	unpacker
+}
+
+src_prepare() {
+	local patch
+	cd "${BASE_P}" || die
+	eapply "${WORKDIR}/patch-${PATCH_PV}"
+	for patch in "${WORKDIR}/${PATCHSET}"/*.patch; do
+		eapply "${patch}"
+		# non-experimental patches always finish with Gentoo Kconfig
+		# we built -bins without them
+		if [[ ${patch} == *Add-Gentoo-Linux-support-config-settings* ]]
+		then
+			break
+		fi
+	done
+
+	default
+
+	# add Gentoo patchset version
+	local extraversion=${PV#${PATCH_PV}}
+	sed -i -e "s:^\(EXTRAVERSION =\).*:\1 ${extraversion/_/-}:" Makefile || die
+}
+
+src_configure() {
+	# force ld.bfd if we can find it easily
+	local HOSTLD="$(tc-getBUILD_LD)"
+	if type -P "${HOSTLD}.bfd" &>/dev/null; then
+		HOSTLD+=.bfd
+	fi
+	local LD="$(tc-getLD)"
+	if type -P "${LD}.bfd" &>/dev/null; then
+		LD+=.bfd
+	fi
+	tc-export_build_env
+	local makeargs=(
+		V=1
+		WERROR=0
+
+		HOSTCC="$(tc-getBUILD_CC)"
+		HOSTCXX="$(tc-getBUILD_CXX)"
+		HOSTLD="${HOSTLD}"
+		HOSTAR="$(tc-getBUILD_AR)"
+		HOSTCFLAGS="${BUILD_CFLAGS}"
+		HOSTLDFLAGS="${BUILD_LDFLAGS}"
+
+		CROSS_COMPILE=${CHOST}-
+		AS="$(tc-getAS)"
+		CC="$(tc-getCC)"
+		LD="${LD}"
+		AR="$(tc-getAR)"
+		NM="$(tc-getNM)"
+		STRIP="$(tc-getSTRIP)"
+		OBJCOPY="$(tc-getOBJCOPY)"
+		OBJDUMP="$(tc-getOBJDUMP)"
+		READELF="$(tc-getREADELF)"
+
+		# we need to pass it to override colliding Gentoo envvar
+		ARCH="$(tc-arch-kernel)"
+
+		O="${WORKDIR}"/modprep
+	)
+
+	local kernel_dir="${BINPKG}/image/usr/src/linux-${KV_FULL}"
+
+	# If this is set it will have an effect on the name of the output
+	# image. Set this variable to track this setting.
+	if grep -q "CONFIG_EFI_ZBOOT=y" "${kernel_dir}/.config"; then
+		KERNEL_EFI_ZBOOT=1
+	elif use arm64 && use generic-uki; then
+		die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build"
+	fi
+
+	local image="${kernel_dir}/$(dist-kernel_get_image_path)"
+	local uki="${image%/*}/uki.efi"
+
+	# Override user variable with the cert used during build
+	openssl x509 \
+		-inform DER -in "${kernel_dir}/certs/signing_key.x509" \
+		-outform PEM -out "${T}/cert.pem" ||
+			die "Failed to convert pcrpkey to PEM format"
+	export SECUREBOOT_SIGN_CERT=${T}/cert.pem
+
+	if [[ -s ${uki} ]]; then
+		# We need to extract the plain image for the test phase
+		# and USE=-generic-uki.
+		kernel-install_extract_from_uki linux "${uki}" "${image}"
+	fi
+
+	mkdir modprep || die
+	cp "${kernel_dir}/.config" modprep/ || die
+	emake -C "${BASE_P}" "${makeargs[@]}" modules_prepare
+}
+
+src_test() {
+	local kernel_dir="${BINPKG}/image/usr/src/linux-${KV_FULL}"
+	kernel-install_test "${KV_FULL}" \
+		"${WORKDIR}/${kernel_dir}/$(dist-kernel_get_image_path)" \
+		"${BINPKG}/image/lib/modules/${KV_FULL}"
+}
+
+src_install() {
+	local rel_kernel_dir=/usr/src/linux-${KV_FULL}
+	local kernel_dir="${BINPKG}/image${rel_kernel_dir}"
+	local image="${kernel_dir}/$(dist-kernel_get_image_path)"
+	local uki="${image%/*}/uki.efi"
+	if [[ -s ${uki} ]]; then
+		# Keep the kernel image type we don't want out of install tree
+		# Replace back with placeholder
+		if use generic-uki; then
+			> "${image}" || die
+		else
+			> "${uki}" || die
+		fi
+	fi
+
+	# Overwrite the identifier in the prebuilt package
+	echo "${CATEGORY}/${PF}:${SLOT}" > "${kernel_dir}/dist-kernel" || die
+
+	mv "${BINPKG}"/image/{lib,usr} "${ED}"/ || die
+
+	# FIXME: requires proper mount-boot
+	if [[ -d ${BINPKG}/image/boot/dtbs ]]; then
+		mv "${BINPKG}"/image/boot "${ED}"/ || die
+	fi
+
+	# strip out-of-source build stuffs from modprep
+	# and then copy built files
+	find modprep -type f '(' \
+			-name Makefile -o \
+			-name '*.[ao]' -o \
+			'(' -name '.*' -a -not -name '.config' ')' \
+		')' -delete || die
+	rm modprep/source || die
+	cp -p -R modprep/. "${ED}${rel_kernel_dir}"/ || die
+
+	# Update timestamps on all modules to ensure cleanup works correctly
+	# when switching USE=modules-compress.
+	find "${ED}/lib" -name '*.ko' -exec touch {} + || die
+
+	# Modules were already stripped before signing
+	dostrip -x /lib/modules
+	kernel-install_compress_modules
+
+	# Mirror the logic from kernel-build_src_install, for architectures
+	# where USE=debug is used.
+	if use ppc64; then
+		dostrip -x "${rel_kernel_dir}/$(dist-kernel_get_image_path)"
+	elif use debug && { use amd64 || use arm64; }; then
+		dostrip -x "${rel_kernel_dir}/vmlinux"
+		dostrip -x "${rel_kernel_dir}/vmlinux.ctfa"
+	fi
+}