Comment # 3 on bug 1103392 from Larry Finger

Once you have filed a bug, then any changes in the project should be noted with
the bug so as to not waste the efforts of the readers of the bug report.

In a standard Leap 15.0 virtual machine, I have the following installed:
kernel: 4.12.14-lp150.12.7.1 from openSUSE-Leap-15.0-Update
VB guest kmp: 5.2.14_k4.12.14_lp150.12.4-lp150.4.6.1-x86_64 from the same repo
as the kernel

These two are compatible. Is it possible that zypper is resolving the
dependencies differently than OBS/kiwi?

I just started the push process for VB 5.2.16 in Leap 15.0. The changes fix a
number of vulnerabilities. I have no idea if this will help your problem.