diff --git a/src/audio/google/google_hotword_detect.c b/src/audio/google/google_hotword_detect.c
index 1055f7914e1e..1280368fbd4a 100644
--- a/src/audio/google/google_hotword_detect.c
+++ b/src/audio/google/google_hotword_detect.c
@@ -112,7 +112,7 @@ static struct comp_dev *ghd_create(const struct comp_driver *drv,
 	cd->event.event_type = SOF_CTRL_EVENT_KD;
 	cd->event.num_elems = 0;
 
-	cd->msg = ipc_msg_init(cd->event.rhdr.hdr.cmd, cd->event.rhdr.hdr.size);
+	cd->msg = ipc_msg_init(NULL, cd->event.rhdr.hdr.cmd, cd->event.rhdr.hdr.size);
 	if (!cd->msg) {
 		comp_err(dev, "ipc_msg_init failed");
 		goto cd_fail;
diff --git a/src/audio/host-legacy.c b/src/audio/host-legacy.c
index 4560959bb044..900fdd03bb73 100644
--- a/src/audio/host-legacy.c
+++ b/src/audio/host-legacy.c
@@ -560,7 +560,7 @@ int host_common_new(struct host_data *hd, struct comp_dev *dev,
 	ipc_build_stream_posn(&hd->posn, SOF_IPC_STREAM_POSITION, config_id);
 
 #if CONFIG_HOST_DMA_IPC_POSITION_UPDATES
-	hd->msg = ipc_msg_init(hd->posn.rhdr.hdr.cmd, hd->posn.rhdr.hdr.size);
+	hd->msg = ipc_msg_init(NULL, hd->posn.rhdr.hdr.cmd, hd->posn.rhdr.hdr.size);
 	if (!hd->msg) {
 		comp_err(dev, "ipc_msg_init failed");
 		dma_put(hd->dma);
diff --git a/src/audio/host-zephyr.c b/src/audio/host-zephyr.c
index 95f8f35a3736..379bbb690834 100644
--- a/src/audio/host-zephyr.c
+++ b/src/audio/host-zephyr.c
@@ -728,7 +728,7 @@ __cold int host_common_new(struct host_data *hd, struct comp_dev *dev,
 	ipc_build_stream_posn(&hd->posn, SOF_IPC_STREAM_POSITION, config_id);
 
 #if CONFIG_HOST_DMA_IPC_POSITION_UPDATES
-	hd->msg = ipc_msg_init(hd->posn.rhdr.hdr.cmd, sizeof(hd->posn));
+	hd->msg = ipc_msg_init(hd->heap, hd->posn.rhdr.hdr.cmd, sizeof(hd->posn));
 	if (!hd->msg) {
 		comp_err(dev, "ipc_msg_init failed");
 		sof_dma_put(hd->dma);
diff --git a/src/audio/mfcc/mfcc.c b/src/audio/mfcc/mfcc.c
index 724d3d7faf06..88d5d4863d31 100644
--- a/src/audio/mfcc/mfcc.c
+++ b/src/audio/mfcc/mfcc.c
@@ -129,7 +129,7 @@ static int mfcc_free(struct processing_module *mod)
 	struct mfcc_comp_data *cd = module_get_private_data(mod);
 
 	comp_info(mod->dev, "entry");
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 	cd->msg = NULL;
 	mod_data_blob_handler_free(mod, cd->model_handler);
 	mfcc_free_buffers(mod);
diff --git a/src/audio/mfcc/mfcc_ipc4.c b/src/audio/mfcc/mfcc_ipc4.c
index bb20d85e413b..21850be8a5d6 100644
--- a/src/audio/mfcc/mfcc_ipc4.c
+++ b/src/audio/mfcc/mfcc_ipc4.c
@@ -49,10 +49,10 @@ int mfcc_ipc_notification_init(struct processing_module *mod)
 	primary->r.type = SOF_IPC4_GLB_NOTIFICATION;
 	primary->r.rsp = SOF_IPC4_MESSAGE_DIR_MSG_REQUEST;
 	primary->r.msg_tgt = SOF_IPC4_MESSAGE_TARGET_FW_GEN_MSG;
-	cd->msg = ipc_msg_w_ext_init(msg_proto.header, msg_proto.extension,
-				     sizeof(struct sof_ipc4_notify_module_data) +
-				     sizeof(struct sof_ipc4_control_msg_payload) +
-				     sizeof(struct sof_ipc4_ctrl_value_chan));
+	cd->msg = mod_ipc_msg_w_ext_init(mod, msg_proto.header, msg_proto.extension,
+					 sizeof(struct sof_ipc4_notify_module_data) +
+					 sizeof(struct sof_ipc4_control_msg_payload) +
+					 sizeof(struct sof_ipc4_ctrl_value_chan));
 	if (!cd->msg) {
 		comp_err(dev, "Failed to initialize VAD notification");
 		return -ENOMEM;
diff --git a/src/audio/module_adapter/module/cadence_ipc4.c b/src/audio/module_adapter/module/cadence_ipc4.c
index 763272964d61..bd002ea19d9f 100644
--- a/src/audio/module_adapter/module/cadence_ipc4.c
+++ b/src/audio/module_adapter/module/cadence_ipc4.c
@@ -233,7 +233,7 @@ static struct ipc_msg *cadence_codec_notification_init(struct processing_module
 	primary.r.type = SOF_IPC4_GLB_NOTIFICATION;
 	primary.r.rsp = SOF_IPC4_MESSAGE_DIR_MSG_REQUEST;
 	primary.r.msg_tgt = SOF_IPC4_MESSAGE_TARGET_FW_GEN_MSG;
-	msg = ipc_msg_w_ext_init(primary.dat, 0, sizeof(*msg_module_data));
+	msg = mod_ipc_msg_w_ext_init(mod, primary.dat, 0, sizeof(*msg_module_data));
 	if (!msg)
 		return NULL;
 
@@ -366,7 +366,7 @@ static int cadence_codec_init(struct processing_module *mod)
 	if (setup_cfg)
 		mod_free(mod, setup_cfg->data);
 free_notification:
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 free_cd:
 	mod_free(mod, cd);
 
@@ -568,7 +568,7 @@ static int ipc4_cadence_codec_free(struct processing_module *mod)
 {
 	struct cadence_codec_data *cd = module_get_private_data(mod);
 
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 
 	return cadence_codec_free(mod);
 }
diff --git a/src/audio/pipeline/pipeline-graph.c b/src/audio/pipeline/pipeline-graph.c
index 6e154dfbfba6..3c1cc0de760b 100644
--- a/src/audio/pipeline/pipeline-graph.c
+++ b/src/audio/pipeline/pipeline-graph.c
@@ -158,7 +158,7 @@ struct pipeline *pipeline_new(struct k_heap *heap, uint32_t pipeline_id, uint32_
 	ipc_build_stream_posn(&posn, SOF_IPC_STREAM_TRIG_XRUN, p->comp_id);
 
 	if (posn.rhdr.hdr.size) {
-		p->msg = ipc_msg_init(posn.rhdr.hdr.cmd, posn.rhdr.hdr.size);
+		p->msg = ipc_msg_init(heap, posn.rhdr.hdr.cmd, posn.rhdr.hdr.size);
 		if (!p->msg) {
 			pipe_err(p, "ipc_msg_init failed");
 			goto free;
diff --git a/src/audio/sound_dose/sound_dose-ipc4.c b/src/audio/sound_dose/sound_dose-ipc4.c
index fd3a8151e984..3c3f537dc338 100644
--- a/src/audio/sound_dose/sound_dose-ipc4.c
+++ b/src/audio/sound_dose/sound_dose-ipc4.c
@@ -32,9 +32,9 @@ static struct ipc_msg *sound_dose_notification_init(struct processing_module *mo
 	primary->r.type = SOF_IPC4_GLB_NOTIFICATION;
 	primary->r.rsp = SOF_IPC4_MESSAGE_DIR_MSG_REQUEST;
 	primary->r.msg_tgt = SOF_IPC4_MESSAGE_TARGET_FW_GEN_MSG;
-	msg = ipc_msg_w_ext_init(msg_proto.header, msg_proto.extension,
-				 sizeof(struct sof_ipc4_notify_module_data) +
-				 sizeof(struct sof_ipc4_control_msg_payload));
+	msg = mod_ipc_msg_w_ext_init(mod, msg_proto.header, msg_proto.extension,
+				     sizeof(struct sof_ipc4_notify_module_data) +
+				     sizeof(struct sof_ipc4_control_msg_payload));
 	if (!msg)
 		return NULL;
 
diff --git a/src/audio/sound_dose/sound_dose.c b/src/audio/sound_dose/sound_dose.c
index c28b55baee4d..e0767981b943 100644
--- a/src/audio/sound_dose/sound_dose.c
+++ b/src/audio/sound_dose/sound_dose.c
@@ -327,7 +327,7 @@ __cold static int sound_dose_free(struct processing_module *mod)
 	comp_dbg(mod->dev, "entry");
 
 	sound_dose_filters_free(cd);
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 	rfree(cd->abi);
 	rfree(cd);
 	return 0;
diff --git a/src/audio/tdfb/tdfb.c b/src/audio/tdfb/tdfb.c
index bf3d1dd8ff5e..eed22f395632 100644
--- a/src/audio/tdfb/tdfb.c
+++ b/src/audio/tdfb/tdfb.c
@@ -676,7 +676,7 @@ static int tdfb_init(struct processing_module *mod)
 err:
 	/* These are null if not used for IPC version */
 	mod_free(mod, cd->ctrl_data);
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 	mod_data_blob_handler_free(mod, cd->model_handler);
 
 err_free_cd:
@@ -691,7 +691,7 @@ static int tdfb_free(struct processing_module *mod)
 
 	comp_dbg(mod->dev, "entry");
 
-	ipc_msg_free(cd->msg);
+	mod_ipc_msg_free(mod, cd->msg);
 	tdfb_free_delaylines(mod);
 	mod_data_blob_handler_free(mod, cd->model_handler);
 	tdfb_direction_free(mod);
diff --git a/src/audio/tdfb/tdfb_ipc3.c b/src/audio/tdfb/tdfb_ipc3.c
index 1ebdb9641ccf..f7b655065674 100644
--- a/src/audio/tdfb/tdfb_ipc3.c
+++ b/src/audio/tdfb/tdfb_ipc3.c
@@ -36,7 +36,7 @@ static int init_get_ctl_ipc(struct processing_module *mod)
 
 	cd->ctrl_data->rhdr.hdr.cmd = SOF_IPC_GLB_COMP_MSG | SOF_IPC_COMP_GET_VALUE | comp_id;
 	cd->ctrl_data->rhdr.hdr.size = TDFB_GET_CTRL_DATA_SIZE;
-	cd->msg = ipc_msg_init(cd->ctrl_data->rhdr.hdr.cmd, cd->ctrl_data->rhdr.hdr.size);
+	cd->msg = mod_ipc_msg_init(mod, cd->ctrl_data->rhdr.hdr.cmd, cd->ctrl_data->rhdr.hdr.size);
 
 	cd->ctrl_data->comp_id = comp_id;
 	cd->ctrl_data->type = SOF_CTRL_TYPE_VALUE_CHAN_GET;
diff --git a/src/audio/tdfb/tdfb_ipc4.c b/src/audio/tdfb/tdfb_ipc4.c
index 2f7e7e865214..a7b4e34977c7 100644
--- a/src/audio/tdfb/tdfb_ipc4.c
+++ b/src/audio/tdfb/tdfb_ipc4.c
@@ -48,8 +48,8 @@ static struct ipc_msg *tdfb_notification_init(struct processing_module *mod,
 	primary->r.type = SOF_IPC4_GLB_NOTIFICATION;
 	primary->r.rsp = SOF_IPC4_MESSAGE_DIR_MSG_REQUEST;
 	primary->r.msg_tgt = SOF_IPC4_MESSAGE_TARGET_FW_GEN_MSG;
-	msg = ipc_msg_w_ext_init(msg_proto.header, msg_proto.extension,
-				 sizeof(struct sof_ipc4_notify_module_data) +
+	msg = mod_ipc_msg_w_ext_init(mod, msg_proto.header, msg_proto.extension,
+				     sizeof(struct sof_ipc4_notify_module_data) +
 				 sizeof(struct sof_ipc4_control_msg_payload) +
 				 sizeof(struct sof_ipc4_ctrl_value_chan));
 	if (!msg)
diff --git a/src/include/ipc4/notification.h b/src/include/ipc4/notification.h
index 614a926d16ad..bad08a39082c 100644
--- a/src/include/ipc4/notification.h
+++ b/src/include/ipc4/notification.h
@@ -297,4 +297,21 @@ void send_mixer_underrun_notif_msg(uint32_t resource_id, uint32_t eos_flag, uint
 				   uint32_t expected_data_mixed);
 void ipc4_update_notification_mask(uint32_t ntfy_mask, uint32_t enabled_mask);
 
+#ifdef CONFIG_SOF_USERSPACE_LL
+
+__syscall bool send_resource_notif(uint32_t resource_id, uint32_t event_type,
+				   uint32_t resource_type, void *data, uint32_t data_size);
+
+bool z_impl_send_resource_notif(uint32_t resource_id, uint32_t event_type,
+				uint32_t resource_type, void *data, uint32_t data_size);
+
+#include <zephyr/syscalls/notification.h>
+
+#else
+
+bool send_resource_notif(uint32_t resource_id, uint32_t event_type,
+			 uint32_t resource_type, void *data, uint32_t data_size);
+
+#endif /* CONFIG_SOF_USERSPACE_LL */
+
 #endif /* __IPC4_NOTIFICATION_H__ */
diff --git a/src/include/sof/audio/module_adapter/module/generic.h b/src/include/sof/audio/module_adapter/module/generic.h
index 6740593a7cf1..cdc2387e5c91 100644
--- a/src/include/sof/audio/module_adapter/module/generic.h
+++ b/src/include/sof/audio/module_adapter/module/generic.h
@@ -19,6 +19,7 @@
 #include <sof/audio/component.h>
 #include <sof/audio/sink_api.h>
 #include <sof/audio/source_api.h>
+#include <sof/ipc/msg.h>
 #include "module_interface.h"
 
 #include <sof/compiler_attributes.h>
@@ -239,6 +240,65 @@ static inline void *mod_zalloc(struct processing_module *mod, size_t size)
 	return ret;
 }
 
+/**
+ * \brief Initialize a new IPC message using the module allocator.
+ * @param mod Module to allocate from
+ * @param header Message header metadata
+ * @param extension Message header extension metadata
+ * @param size Message data size in bytes.
+ * @return New IPC message.
+ */
+static inline struct ipc_msg *mod_ipc_msg_w_ext_init(struct processing_module *mod,
+						     uint32_t header,
+						     uint32_t extension,
+						     uint32_t size)
+{
+	struct ipc_msg *msg;
+
+	msg = mod_zalloc(mod, sizeof(*msg));
+	if (!msg)
+		return NULL;
+
+	if (size) {
+		msg->tx_data = mod_zalloc(mod, size);
+		if (!msg->tx_data) {
+			mod_free(mod, msg);
+			return NULL;
+		}
+	}
+
+	msg->header = header;
+	msg->extension = extension;
+	msg->tx_size = size;
+	list_init(&msg->list);
+
+	return msg;
+}
+
+static inline struct ipc_msg *mod_ipc_msg_init(struct processing_module *mod,
+					       uint32_t header, uint32_t size)
+{
+	return mod_ipc_msg_w_ext_init(mod, header, 0, size);
+}
+
+/**
+ * \brief Free an IPC message allocated with mod_ipc_msg_init() or
+ *        mod_ipc_msg_w_ext_init().
+ * @param mod Module that owns the message.
+ * @param msg Message to free (may be NULL).
+ */
+static inline void mod_ipc_msg_free(struct processing_module *mod,
+				    struct ipc_msg *msg)
+{
+	if (!msg)
+		return;
+
+	ipc_msg_list_remove(msg);
+
+	mod_free(mod, msg->tx_data);
+	mod_free(mod, msg);
+}
+
 #if CONFIG_COMP_BLOB
 #if defined(__ZEPHYR__) && defined(CONFIG_SOF_FULL_ZEPHYR_APPLICATION)
 __syscall struct comp_data_blob_handler *mod_data_blob_handler_new(struct processing_module *mod);
diff --git a/src/include/sof/ipc/ipc_msg_list_remove.h b/src/include/sof/ipc/ipc_msg_list_remove.h
new file mode 100644
index 000000000000..0d22c6f0704a
--- /dev/null
+++ b/src/include/sof/ipc/ipc_msg_list_remove.h
@@ -0,0 +1,30 @@
+/* SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Copyright(c) 2026 Intel Corporation. All rights reserved.
+ */
+
+#ifndef __SOF_IPC_IPC_MSG_LIST_REMOVE_H__
+#define __SOF_IPC_IPC_MSG_LIST_REMOVE_H__
+
+struct ipc_msg;
+
+/**
+ * \brief Remove an IPC message from the send queue.
+ *
+ * Acquires the IPC lock and removes the message from its list.
+ * Safe to call from userspace.
+ *
+ * @param msg The IPC message to remove from the queue.
+ */
+#if defined(__ZEPHYR__) && defined(CONFIG_SOF_USERSPACE_LL)
+__syscall void ipc_msg_list_remove(struct ipc_msg *msg);
+#else
+void z_impl_ipc_msg_list_remove(struct ipc_msg *msg);
+#define ipc_msg_list_remove z_impl_ipc_msg_list_remove
+#endif
+
+#if defined(__ZEPHYR__) && defined(CONFIG_SOF_USERSPACE_LL)
+#include <zephyr/syscalls/ipc_msg_list_remove.h>
+#endif
+
+#endif /* __SOF_IPC_IPC_MSG_LIST_REMOVE_H__ */
diff --git a/src/include/sof/ipc/ipc_msg_send.h b/src/include/sof/ipc/ipc_msg_send.h
new file mode 100644
index 000000000000..c5b9b4a4448a
--- /dev/null
+++ b/src/include/sof/ipc/ipc_msg_send.h
@@ -0,0 +1,32 @@
+/* SPDX-License-Identifier: BSD-3-Clause
+ *
+ * Copyright(c) 2026 Intel Corporation. All rights reserved.
+ */
+
+#ifndef __SOF_IPC_IPC_MSG_SEND_H__
+#define __SOF_IPC_IPC_MSG_SEND_H__
+
+#include <stdbool.h>
+
+struct ipc_msg;
+
+/**
+ * \brief Queues an IPC message for transmission.
+ * @param msg The IPC message.
+ * @param data The message data.
+ * @param high_priority True if a high priority message.
+ */
+#if defined(__ZEPHYR__) && defined(CONFIG_SOF_USERSPACE_LL)
+__syscall void ipc_msg_send(struct ipc_msg *msg, void *data,
+			    bool high_priority);
+#else
+void z_impl_ipc_msg_send(struct ipc_msg *msg, void *data,
+			  bool high_priority);
+#define ipc_msg_send z_impl_ipc_msg_send
+#endif
+
+#if defined(__ZEPHYR__) && defined(CONFIG_SOF_USERSPACE_LL)
+#include <zephyr/syscalls/ipc_msg_send.h>
+#endif
+
+#endif /* __SOF_IPC_IPC_MSG_SEND_H__ */
diff --git a/src/include/sof/ipc/msg.h b/src/include/sof/ipc/msg.h
index 160a9be9ec7c..25f13592a23c 100644
--- a/src/include/sof/ipc/msg.h
+++ b/src/include/sof/ipc/msg.h
@@ -21,6 +21,7 @@
 #include <rtos/spinlock.h>
 #include <sof/trace/trace.h>
 #include <sof/ipc/common.h>
+#include <sof/ipc/ipc_msg_list_remove.h>
 #include <ipc/trace.h>
 
 #include <stdbool.h>
@@ -29,6 +30,7 @@
 struct dai_config;
 struct dma;
 struct dma_sg_elem_array;
+struct k_heap;
 
 struct ipc_msg {
 	uint32_t header;	/* specific to platform */
@@ -40,46 +42,27 @@ struct ipc_msg {
 };
 
 /**
- * \brief Initialize a new IPC message.
+ * \brief Initialize a new IPC message using a specific heap.
+ * @param heap Heap to allocate from (NULL = default kernel heap)
  * @param header Message header metadata
  * @param extension Message header extension metadata
  * @param size Message data size in bytes.
  * @return New IPC message.
  */
-static inline struct ipc_msg *ipc_msg_w_ext_init(uint32_t header, uint32_t extension,
-						 uint32_t size)
-{
-	struct ipc_msg *msg;
-
-	msg = rzalloc(SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT, sizeof(*msg));
-	if (!msg)
-		return NULL;
-
-	if (size) {
-		msg->tx_data = rzalloc(SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT, size);
-		if (!msg->tx_data) {
-			rfree(msg);
-			return NULL;
-		}
-	}
-
-	msg->header = header;
-	msg->extension = extension;
-	msg->tx_size = size;
-	list_init(&msg->list);
-
-	return msg;
-}
+struct ipc_msg *ipc_msg_w_ext_init(struct k_heap *heap, uint32_t header,
+				   uint32_t extension, uint32_t size);
 
 /**
- * \brief Initialise a new IPC message.
+ * \brief Initialize a new IPC message using a specific heap.
+ * @param heap Heap to allocate from (NULL = default kernel heap)
  * @param header Message header metadata
  * @param size Message data size in bytes.
  * @return New IPC message.
  */
-static inline struct ipc_msg *ipc_msg_init(uint32_t header, uint32_t size)
+static inline struct ipc_msg *ipc_msg_init(struct k_heap *heap,
+					   uint32_t header, uint32_t size)
 {
-	return ipc_msg_w_ext_init(header, 0, size);
+	return ipc_msg_w_ext_init(heap, header, 0, size);
 }
 
 /**
@@ -91,16 +74,9 @@ static inline void ipc_msg_free(struct ipc_msg *msg)
 	if (!msg)
 		return;
 
-	struct ipc *ipc = ipc_get();
-	k_spinlock_key_t key;
-
-	key = k_spin_lock(&ipc->lock);
-
-	list_item_del(&msg->list);
+	ipc_msg_list_remove(msg);
 	rfree(msg->tx_data);
 	rfree(msg);
-
-	k_spin_unlock(&ipc->lock, key);
 }
 
 /**
@@ -108,13 +84,7 @@ static inline void ipc_msg_free(struct ipc_msg *msg)
  */
 void ipc_send_queued_msg(void);
 
-/**
- * \brief Queues an IPC message for transmission.
- * @param msg The IPC message to be freed.
- * @param data The message data.
- * @param high_priority True if a high priortity message.
- */
-void ipc_msg_send(struct ipc_msg *msg, void *data, bool high_priority);
+#include <sof/ipc/ipc_msg_send.h>
 
 /**
  * \brief Send an IPC message directly for emergency.
diff --git a/src/ipc/ipc-common.c b/src/ipc/ipc-common.c
index afc8fe45de05..f8acba824c49 100644
--- a/src/ipc/ipc-common.c
+++ b/src/ipc/ipc-common.c
@@ -15,6 +15,7 @@
 #include <sof/ipc/topology.h>
 #include <sof/ipc/common.h>
 #include <sof/ipc/msg.h>
+#include <sof/ipc/ipc_msg_list_remove.h>
 #include <sof/ipc/driver.h>
 #include <sof/ipc/schedule.h>
 #include <rtos/alloc.h>
@@ -39,6 +40,7 @@
 
 #ifdef __ZEPHYR__
 #include <zephyr/kernel.h>
+#include <zephyr/internal/syscall_handler.h>
 #endif
 
 #ifdef CONFIG_SOF_USERSPACE_LL
@@ -64,6 +66,50 @@ struct ipc *ipc_get(void)
 }
 #endif
 
+struct ipc_msg *ipc_msg_w_ext_init(struct k_heap *heap, uint32_t header,
+				   uint32_t extension, uint32_t size)
+{
+	struct ipc_msg *msg;
+
+	if (heap) {
+		msg = sof_heap_alloc(heap, SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT,
+				     sizeof(*msg), 0);
+		if (msg)
+			memset(msg, 0, sizeof(*msg));
+	} else {
+		msg = rzalloc(SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT, sizeof(*msg));
+	}
+	if (!msg)
+		return NULL;
+
+	if (size) {
+		if (heap) {
+			msg->tx_data = sof_heap_alloc(heap,
+					SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT,
+					size, 0);
+			if (msg->tx_data)
+				memset(msg->tx_data, 0, size);
+		} else {
+			msg->tx_data = rzalloc(SOF_MEM_FLAG_USER | SOF_MEM_FLAG_COHERENT,
+					       size);
+		}
+		if (!msg->tx_data) {
+			if (heap)
+				sof_heap_free(heap, msg);
+			else
+				rfree(msg);
+			return NULL;
+		}
+	}
+
+	msg->header = header;
+	msg->extension = extension;
+	msg->tx_size = size;
+	list_init(&msg->list);
+
+	return msg;
+}
+
 int ipc_process_on_core(uint32_t core, bool blocking)
 {
 	struct ipc *ipc = ipc_get();
@@ -237,7 +283,11 @@ __cold void ipc_msg_send_direct(struct ipc_msg *msg, void *data)
 	k_spin_unlock(&ipc->lock, key);
 }
 
+#ifdef CONFIG_SOF_USERSPACE_LL
+void z_impl_ipc_msg_send(struct ipc_msg *msg, void *data, bool high_priority)
+#else
 void ipc_msg_send(struct ipc_msg *msg, void *data, bool high_priority)
+#endif
 {
 	struct ipc *ipc = ipc_get();
 	k_spinlock_key_t key;
@@ -283,6 +333,53 @@ void ipc_msg_send(struct ipc_msg *msg, void *data, bool high_priority)
 }
 EXPORT_SYMBOL(ipc_msg_send);
 
+#ifdef CONFIG_SOF_USERSPACE_LL
+static inline bool z_vrfy_ipc_msg_send_check_data(struct ipc_msg *msg, void *data)
+{
+	K_OOPS(K_SYSCALL_VERIFY(msg->tx_size <= SOF_IPC_MSG_MAX_SIZE));
+
+	if (msg->tx_size > 0) {
+                K_OOPS(K_SYSCALL_VERIFY(msg->tx_data != NULL));
+                K_OOPS(K_SYSCALL_MEMORY_WRITE(msg->tx_data, msg->tx_size));
+        }
+
+	/* If data != NULL and tx_size > 0, verify the data buffer */
+	if (data && msg->tx_size > 0)
+		K_OOPS(K_SYSCALL_MEMORY_READ(data, msg->tx_size));
+
+	return true;
+}
+
+void z_vrfy_ipc_msg_send(struct ipc_msg *msg, void *data, bool high_priority)
+{
+	K_OOPS(K_SYSCALL_MEMORY_WRITE(msg, sizeof(*msg)));
+
+	z_vrfy_ipc_msg_send_check_data(msg, data);
+
+	z_impl_ipc_msg_send(msg, data, high_priority);
+}
+#include <zephyr/syscalls/ipc_msg_send_mrsh.c>
+#endif
+
+void z_impl_ipc_msg_list_remove(struct ipc_msg *msg)
+{
+	struct ipc *ipc = ipc_get();
+	k_spinlock_key_t key;
+
+	key = k_spin_lock(&ipc->lock);
+	list_item_del(&msg->list);
+	k_spin_unlock(&ipc->lock, key);
+}
+
+#ifdef CONFIG_SOF_USERSPACE_LL
+void z_vrfy_ipc_msg_list_remove(struct ipc_msg *msg)
+{
+	K_OOPS(K_SYSCALL_MEMORY_WRITE(msg, sizeof(*msg)));
+	z_impl_ipc_msg_list_remove(msg);
+}
+#include <zephyr/syscalls/ipc_msg_list_remove_mrsh.c>
+#endif
+
 #ifdef __ZEPHYR__
 static void ipc_work_handler(struct k_work *work)
 {
diff --git a/src/ipc/ipc4/CMakeLists.txt b/src/ipc/ipc4/CMakeLists.txt
index 360a4e988650..c9f9fcb5710d 100644
--- a/src/ipc/ipc4/CMakeLists.txt
+++ b/src/ipc/ipc4/CMakeLists.txt
@@ -7,6 +7,7 @@ add_local_sources(sof
 	helper.c
 	logging.c
 	notification.c
+	notification-user.c
 )
 
 # The DAI interface is not implemented in library builds and
diff --git a/src/ipc/ipc4/notification-user.c b/src/ipc/ipc4/notification-user.c
new file mode 100644
index 000000000000..37a881e32829
--- /dev/null
+++ b/src/ipc/ipc4/notification-user.c
@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: BSD-3-Clause
+/*
+ * Copyright(c) 2023 Intel Corporation. All rights reserved.
+ *
+ * Author: Piotr Makaruk <piotr.makaruk@intel.com>
+ *	   Adrian Warecki <adrian.warecki@intel.com>
+ */
+
+#include <sof/common.h>
+#include <stdbool.h>
+#include <ipc4/notification.h>
+
+#include <rtos/symbol.h>
+
+static enum sof_ipc4_resource_event_type dir_to_xrun_event(enum sof_ipc_stream_direction dir)
+{
+	return (dir == SOF_IPC_STREAM_PLAYBACK) ? SOF_IPC4_GATEWAY_UNDERRUN_DETECTED :
+						  SOF_IPC4_GATEWAY_OVERRUN_DETECTED;
+}
+
+bool send_copier_gateway_xrun_notif_msg(uint32_t pipeline_id, enum sof_ipc_stream_direction dir)
+{
+	return send_resource_notif(pipeline_id, dir_to_xrun_event(dir), SOF_IPC4_PIPELINE, NULL,
+				   0);
+}
+
+bool send_gateway_xrun_notif_msg(uint32_t resource_id, enum sof_ipc_stream_direction dir)
+{
+	return send_resource_notif(resource_id, dir_to_xrun_event(dir), SOF_IPC4_GATEWAY, NULL, 0);
+}
+
+void send_mixer_underrun_notif_msg(uint32_t resource_id, uint32_t eos_flag, uint32_t data_mixed,
+				   uint32_t expected_data_mixed)
+{
+	struct ipc4_mixer_underrun_event_data mixer_underrun_data;
+
+	mixer_underrun_data.eos_flag = eos_flag;
+	mixer_underrun_data.data_mixed = data_mixed;
+	mixer_underrun_data.expected_data_mixed = expected_data_mixed;
+
+	send_resource_notif(resource_id, SOF_IPC4_MIXER_UNDERRUN_DETECTED, SOF_IPC4_PIPELINE,
+			    &mixer_underrun_data, sizeof(mixer_underrun_data));
+}
+EXPORT_SYMBOL(send_mixer_underrun_notif_msg);
+
+void send_process_data_error_notif_msg(uint32_t resource_id, uint32_t error_code)
+{
+	struct ipc4_process_data_error_event_data error_data;
+
+	error_data.error_code = error_code;
+
+	send_resource_notif(resource_id, SOF_IPC4_PROCESS_DATA_ERROR, SOF_IPC4_MODULE_INSTANCE,
+			    &error_data, sizeof(error_data));
+}
diff --git a/src/ipc/ipc4/notification.c b/src/ipc/ipc4/notification.c
index 9fd566ee1f93..485b875f8468 100644
--- a/src/ipc/ipc4/notification.c
+++ b/src/ipc/ipc4/notification.c
@@ -12,7 +12,9 @@
 #include <ipc4/notification.h>
 #include <sof/ipc/notification_pool.h>
 
-#include <rtos/symbol.h>
+#ifdef CONFIG_SOF_USERSPACE_LL
+#include <zephyr/internal/syscall_handler.h>
+#endif
 
 static uint32_t notification_mask = 0xFFFFFFFF;
 
@@ -37,8 +39,13 @@ static bool is_notif_filtered_out(uint32_t event_type)
 	return (notification_mask & BIT(notif_idx)) == 0;
 }
 
-static bool send_resource_notif(uint32_t resource_id, uint32_t event_type, uint32_t resource_type,
-				void *data, uint32_t data_size)
+#ifdef CONFIG_SOF_USERSPACE_LL
+bool z_impl_send_resource_notif(uint32_t resource_id, uint32_t event_type,
+				uint32_t resource_type, void *data, uint32_t data_size)
+#else
+bool send_resource_notif(uint32_t resource_id, uint32_t event_type,
+			 uint32_t resource_type, void *data, uint32_t data_size)
+#endif
 {
 	struct ipc_msg *msg;
 
@@ -80,49 +87,34 @@ static bool send_resource_notif(uint32_t resource_id, uint32_t event_type, uint3
 	return true;
 }
 
-static enum sof_ipc4_resource_event_type dir_to_xrun_event(enum sof_ipc_stream_direction dir)
-{
-	return (dir == SOF_IPC_STREAM_PLAYBACK) ? SOF_IPC4_GATEWAY_UNDERRUN_DETECTED :
-						  SOF_IPC4_GATEWAY_OVERRUN_DETECTED;
-}
-
 void ipc4_update_notification_mask(uint32_t ntfy_mask, uint32_t enabled_mask)
 {
 	notification_mask &= enabled_mask | (~ntfy_mask);
 	notification_mask |= enabled_mask & ntfy_mask;
 }
 
-bool send_copier_gateway_xrun_notif_msg(uint32_t pipeline_id, enum sof_ipc_stream_direction dir)
+#ifdef CONFIG_SOF_USERSPACE_LL
+static inline bool z_vrfy_send_resource_notif(uint32_t resource_id, uint32_t event_type,
+					      uint32_t resource_type, void *data,
+					      uint32_t data_size)
 {
-	return send_resource_notif(pipeline_id, dir_to_xrun_event(dir), SOF_IPC4_PIPELINE, NULL,
-				   0);
-}
+	/* Validate event_type is a known resource event */
+	K_OOPS(K_SYSCALL_VERIFY(event_type < SOF_IPC4_INVALID_RESOURCE_EVENT_TYPE));
 
-bool send_gateway_xrun_notif_msg(uint32_t resource_id, enum sof_ipc_stream_direction dir)
-{
-	return send_resource_notif(resource_id, dir_to_xrun_event(dir), SOF_IPC4_GATEWAY, NULL, 0);
-}
+	/* Validate resource_type is a known resource type */
+	K_OOPS(K_SYSCALL_VERIFY(resource_type < SOF_IPC4_INVALID_RESOURCE_TYPE));
 
-void send_mixer_underrun_notif_msg(uint32_t resource_id, uint32_t eos_flag, uint32_t data_mixed,
-				   uint32_t expected_data_mixed)
-{
-	struct ipc4_mixer_underrun_event_data mixer_underrun_data;
-
-	mixer_underrun_data.eos_flag = eos_flag;
-	mixer_underrun_data.data_mixed = data_mixed;
-	mixer_underrun_data.expected_data_mixed = expected_data_mixed;
+	/* data and data_size must be consistent */
+	K_OOPS(K_SYSCALL_VERIFY((!data && !data_size) || (data && data_size)));
 
-	send_resource_notif(resource_id, SOF_IPC4_MIXER_UNDERRUN_DETECTED, SOF_IPC4_PIPELINE,
-			    &mixer_underrun_data, sizeof(mixer_underrun_data));
-}
-EXPORT_SYMBOL(send_mixer_underrun_notif_msg);
-
-void send_process_data_error_notif_msg(uint32_t resource_id, uint32_t error_code)
-{
-	struct ipc4_process_data_error_event_data error_data;
+	/* Payload must fit in the event_data union and the IPC message */
+	K_OOPS(K_SYSCALL_VERIFY(data_size <= sizeof(union ipc4_resource_event_data)));
+	K_OOPS(K_SYSCALL_VERIFY(data_size <= SOF_IPC_MSG_MAX_SIZE));
 
-	error_data.error_code = error_code;
+	if (data && data_size)
+		K_OOPS(K_SYSCALL_MEMORY_READ(data, data_size));
 
-	send_resource_notif(resource_id, SOF_IPC4_PROCESS_DATA_ERROR, SOF_IPC4_MODULE_INSTANCE,
-			    &error_data, sizeof(error_data));
+	return z_impl_send_resource_notif(resource_id, event_type, resource_type, data, data_size);
 }
+#include <zephyr/syscalls/send_resource_notif_mrsh.c>
+#endif
diff --git a/src/library_manager/lib_notification.c b/src/library_manager/lib_notification.c
index 36aa85835e70..0feab9660c3e 100644
--- a/src/library_manager/lib_notification.c
+++ b/src/library_manager/lib_notification.c
@@ -53,7 +53,7 @@ struct ipc_msg *lib_notif_msg_init(uint32_t header, uint32_t size)
 					sizeof(*msg_pool_elem));
 		if (!msg_pool_elem)
 			return NULL;
-		msg = ipc_msg_init(header, SRAM_OUTBOX_SIZE);
+		msg = ipc_msg_init(NULL, header, SRAM_OUTBOX_SIZE);
 		if (!msg) {
 			rfree(msg_pool_elem);
 			return NULL;
diff --git a/src/samples/audio/detect_test.c b/src/samples/audio/detect_test.c
index 7979d7db3d6c..27068bc52838 100644
--- a/src/samples/audio/detect_test.c
+++ b/src/samples/audio/detect_test.c
@@ -472,7 +472,7 @@ static struct ipc_msg *ipc4_kd_notification_init(uint32_t word_id,
 
 	notif.extension.r.sv_score = score;
 
-	msg = ipc_msg_w_ext_init(notif.primary.dat,
+	msg = ipc_msg_w_ext_init(NULL, notif.primary.dat,
 				 notif.extension.dat,
 				 0);
 	if (!msg)
@@ -731,7 +731,7 @@ static struct comp_dev *test_keyword_new(const struct comp_driver *drv,
 	cd->msg = ipc4_kd_notification_init(NOTIFICATION_DEFAULT_WORD_ID,
 					    NOTIFICATION_DEFAULT_SCORE);
 #else
-	cd->msg = ipc_msg_init(cd->event.rhdr.hdr.cmd, sizeof(cd->event));
+	cd->msg = ipc_msg_init(NULL, cd->event.rhdr.hdr.cmd, sizeof(cd->event));
 #endif /* CONFIG_IPC_MAJOR_4 */
 
 	if (!cd->msg) {
diff --git a/src/trace/dma-trace.c b/src/trace/dma-trace.c
index bfa359b4ba74..57db2da2c36d 100644
--- a/src/trace/dma-trace.c
+++ b/src/trace/dma-trace.c
@@ -160,7 +160,7 @@ int dma_trace_init_early(struct sof *sof)
 	k_spinlock_init(&sof->dmat->lock);
 
 	ipc_build_trace_posn(&sof->dmat->posn);
-	sof->dmat->msg = ipc_msg_init(sof->dmat->posn.rhdr.hdr.cmd,
+	sof->dmat->msg = ipc_msg_init(NULL, sof->dmat->posn.rhdr.hdr.cmd,
 				      sof->dmat->posn.rhdr.hdr.size);
 	if (!sof->dmat->msg) {
 		ret = -ENOMEM;
diff --git a/zephyr/CMakeLists.txt b/zephyr/CMakeLists.txt
index 0ed4a13ee742..037644689690 100644
--- a/zephyr/CMakeLists.txt
+++ b/zephyr/CMakeLists.txt
@@ -625,6 +625,8 @@ zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/lib/fast-get.h)
 zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/ipc/ipc_reply.h)
 zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/schedule/ll_schedule_domain.h)
 zephyr_syscall_header(${SOF_SRC_PATH}/include/ipc4/handler.h)
+zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/ipc/ipc_msg_send.h)
+zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/ipc/ipc_msg_list_remove.h)
 zephyr_syscall_header(include/rtos/alloc.h)
 zephyr_library_sources_ifdef(CONFIG_SOF_USERSPACE_INTERFACE_ALLOC syscall/alloc.c)
 zephyr_syscall_header(${SOF_SRC_PATH}/include/sof/lib/dai-zephyr.h)
@@ -632,6 +634,8 @@ zephyr_library_sources_ifdef(CONFIG_USERSPACE syscall/dai.c)
 
 zephyr_syscall_header(${SOF_SRC_PATH}/include/user/debug_stream_slot.h)
 
+zephyr_syscall_header(${SOF_SRC_PATH}/include/ipc4/notification.h)
+
 zephyr_library_link_libraries(SOF)
 target_link_libraries(SOF INTERFACE zephyr_interface)