USRP Operating System

Hello,

Recently I read a paper on cognitive radio security (Secure
reconfiguration of software-defined radio). It highlights that the
operating system of cognitive radio node may be compromised as the
malware can exploit software vulnerabilities. I am wondering if the FPGA
and firmware are part of the OS? And can they be compromised during
runtime by malware?

Thank you,
Logan